Where can I find CymulateLM.exe?

  • 5 September 2022
  • 1 reply

Userlevel 1
Badge +1

Dear Cymulate Team

Could you give us all the file path for CymulateLM.exe?

In the customer environment, only the file path can be registered for the whitelist.
The customer uses Symantec Endpoint Protection (SEP) 14.

Only file name and hash value can not be registered.

Therefore, we would like to know the file path where CymulateLM.exe is stored.


Thank you!


Best answer by Liel Evron 6 September 2022, 22:51

View original

1 reply


Unfortunately, due to the nature of the Lateral Movement binaries, they move to different directories on each target to avoid basic detection.
Please see if this article contained what you are looking for: