Embed Notice

I already have a good number of LNK files that have exploited this to-be-CVE'd vulnerability over the years.

A precise search for one of the three variants seems to be to look for ExifTool metadata where the TargetFileDOSName value has slashes in it.

However, while VirusTotal obviously captures and stores this data, it doesn't seem to be possible to construct a search that looks for anything there? 🤔