Investigate adding msinfo32.exe

[ConsciousHacker]

Per @subtee on Twitter aka Casey Smith: https://twitter.com/subTee/status/1409919016504893452

msinfo32 /nfo C:\path\lotsofinterestingthings.txt

Not an lolbas :) . May be should be classifed as recon?

No?

[wietze]

This would be expected behaviour though I suppose?

msinfo32.exe System Information - display details about hardware configuration, computer components, software and drivers. https://ss64.com/nt/msinfo32.html

The specific command bypasses the GUI, which *may* be unintended, but the output/result it still in line with the executable's purpose.