{
	"id": "5ca38349-e858-427f-9732-204fdfde5f21",
	"created_at": "2026-04-06T00:12:55.299711Z",
	"updated_at": "2026-04-10T03:35:21.350498Z",
	"deleted_at": null,
	"sha1_hash": "85287f44de2dea4eb345b78b8baa0050138652af",
	"title": "attrib",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 48621,
	"plain_text": "attrib\r\nBy robinharwood\r\nArchived: 2026-04-05 20:44:48 UTC\r\nDisplays, sets, or removes attributes assigned to files or directories. If used without parameters, attrib displays\r\nattributes of all files in the current directory.\r\nattrib [{+|-}r] [{+|-}a] [{+|-}s] [{+|-}h] [{+|-}o] [{+|-}i] [{+|-}x] [{+|-}p] [{+|-}u] [{+|-}b] [\u003cdrive\u003e:][\u003cpa\r\nParameter Description\r\n{+\\|-}r Sets (+) or clears (-) the Read-only file attribute.\r\n{+\\|-}a\r\nSets (+) or clears (-) the Archive file attribute. This attribute set marks files that\r\nhave changed since the last time they were backed up. The xcopy command uses\r\narchive attributes.\r\n{+\\|-}s\r\nSets (+) or clears (-) the System file attribute. If a file uses this attribute set, you\r\nmust clear the attribute before you can change any other attributes for the file.\r\n{+\\|-}h\r\nSets (+) or clears (-) the Hidden file attribute. If a file uses this attribute set, you\r\nmust clear the attribute before you can change any other attributes for the file.\r\n{+\\|-}o Sets (+) or clears (-) the Offline file attribute.\r\n{+\\|-}i Sets (+) or clears (-) the Not Content Indexed file attribute.\r\n{+\\|-}x Sets (+) or clears (-) the Scrub file attribute.\r\n{+\\|-}p Sets (+) or clears (-) the Pinned file attribute.\r\n{+\\|-}u Sets (+) or clears (-) the Unpinned file attribute.\r\n{+\\|-}b Sets (+) or clears (-) the SMR Blob file attribute.\r\n[\u003cdrive\u003e:][\u003cpath\u003e]\r\n[\u003cfilename\u003e]\r\nSpecifies the location and name of the directory, file, or group of files that you\r\nwant to view or change attributes.\r\nYou can use the ? and * wildcard characters in the filename parameter to display or\r\nchange the attributes for a group of files.\r\n/s\r\nApplies attrib and any command-line options to matching files in the current\r\ndirectory and all of its subdirectories.\r\n/d Applies attrib and any command-line options to directories.\r\nhttps://learn.microsoft.com/en-us/windows-server/administration/windows-commands/attrib\r\nPage 1 of 2\n\nParameter Description\r\n/l\r\nApplies attrib and any command-line options to the Symbolic Link, rather than the\r\ntarget of the Symbolic Link.\r\n/? Displays help at the command prompt.\r\nTo display the attributes of a file named News86 that is located in the current directory, type:\r\nattrib news86\r\nTo assign the Read-only attribute to the file named report.txt, type:\r\nattrib +r report.txt\r\nTo remove the Read-only attribute from files in the public directory and its subdirectories on a disk in drive b:,\r\ntype:\r\nattrib -r b:\\public\\*.* /s\r\nTo set the Archive attribute for all files on drive a:, and then clear the Archive attribute for files with the .bak\r\nextension, type:\r\nattrib +a a:*.* \u0026 attrib -a a:*.bak\r\nCommand-Line Syntax Key\r\nxcopy command\r\nSource: https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/attrib\r\nhttps://learn.microsoft.com/en-us/windows-server/administration/windows-commands/attrib\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/attrib"
	],
	"report_names": [
		"attrib"
	],
	"threat_actors": [
		{
			"id": "2864e40a-f233-4618-ac61-b03760a41cbb",
			"created_at": "2023-12-01T02:02:34.272108Z",
			"updated_at": "2026-04-10T02:00:04.97558Z",
			"deleted_at": null,
			"main_name": "WildCard",
			"aliases": [],
			"source_name": "ETDA:WildCard",
			"tools": [
				"RustDown",
				"SysJoker"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "256a6a2d-e8a2-4497-b399-628a7fad4b3e",
			"created_at": "2023-11-30T02:00:07.299845Z",
			"updated_at": "2026-04-10T02:00:03.484788Z",
			"deleted_at": null,
			"main_name": "WildCard",
			"aliases": [],
			"source_name": "MISPGALAXY:WildCard",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434375,
	"ts_updated_at": 1775792121,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/85287f44de2dea4eb345b78b8baa0050138652af.pdf",
		"text": "https://archive.orkl.eu/85287f44de2dea4eb345b78b8baa0050138652af.txt",
		"img": "https://archive.orkl.eu/85287f44de2dea4eb345b78b8baa0050138652af.jpg"
	}
}