atomic-red-team/Windows/Execution/InstallUtil.md at aaa7105a42b6f64e4dedec6f95fd1341cbc13a49

Files

T

caseysmithrc ac8dd2cfec Initial Commit

Initial Checkin

2017-10-11 10:35:17 -07:00

515 B

Raw Blame History

InstallUtil

MITRE ATT&CK Technique: T1118

Execution Examples:

Input:

x86 - C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThings.dll

x64 - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThings.dll

Test Script

InstallUtilBypass.cs

515 B Raw Blame History

InstallUtil

Execution Examples:

Test Script

515 B

Raw Blame History