atomic-red-team/Windows/Execution/InstallUtil.md

InstallUtil

MITRE ATT&CK Technique: T1118

Execution Examples:

Input:

x86 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U InstallUtilBypass.dll

x64 - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U InstallUtilBypass.dll

Test Script

InstallUtilBypass.cs