Match Legitimate Resource Name or Location

Match or approximate the name or location of a legitimate file, Registry key, or other resource to blend into normal activity and evade defenses or observation. Examples include placing an executable in a commonly trusted directory, giving a file a trusted program name, or using a Registry key name close to that of a legitimate program. The included Windows procedure is a controlled filename-masquerading simulation; it does not test execution-policy bypass.