Masquerading

This Windows procedure demonstrates file masquerading by copying an executable under a trusted-looking name, launching that copy, and optionally matching its last-write timestamp to a selected file. These actions illustrate the file-name, location, and metadata scope of ATT&CK T1036; they do not alter the executable's contents or signature and do not by themselves prove that a defense was bypassed.