MMC.exe LOLBin Abuse - Remote MSC Snap-in File Download T1218.014

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects HTTP GET requests for .msc (Microsoft Management Console) files, which can be leveraged as part of an attack chain to abuse the mmc.exe binary for proxy execution of malicious configurations.