Msconfig.exe

MSConfig is a troubleshooting tool which is used to temporarily disable or re-enable software, device drivers or Windows services that run during startup process to help the user determine the cause of a problem with Windows

Paths

  • C:\Windows\System32\msconfig.exe

Commands

Execute

Executes command embeded in crafted c:\windows\system32\mscfgtlc.xml.

Use case: Code execution using Msconfig.exe

Privileges: Administrator

Msconfig.exe -5

Detection

Resources