AppCert.exe

Windows App Certification Kit command-line tool.

Paths

Execute an executable file via the Windows App Certification Kit command-line tool.

Use case: Performs execution of specified file, can be used as a defense evasion

Privileges: Administrator

appcert.exe test -apptype desktop -setuppath {PATH_ABSOLUTE:.exe} -reportoutputpath {PATH_ABSOLUTE:.xml}

Install an MSI file via an msiexec instance spawned via appcert.exe as parent process.

Use case: Execute custom made MSI file with malicious code

Privileges: Administrator

appcert.exe test -apptype desktop -setuppath {PATH_ABSOLUTE:.msi} -setupcommandline /q -reportoutputpath {PATH_ABSOLUTE:.xml}