Installutil.exe

~/Privilege Escalation/Windows/Binaries# cat Installutil.exe.md █

The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies

Paths:

C:\Windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\InstallUtil.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe

Detection:

AWL bypass

Execute the target .NET DLL or EXE.

InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThings.dll

Execute

Execute the target .NET DLL or EXE.

InstallUtil.exe /logfile= /LogToConsole=false /U AllTheThings.dll