Regasm.exe

~/Privilege Escalation/Windows/Binaries# cat Regasm.exe.md █

Part of .NET

Paths:

C:\Windows\Microsoft.NET\Framework\v2.0.50727\regasm.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\regasm.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\regasm.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\regasm.exe

Detection: regasm.exe executing dll file

AWL bypass

Loads the target .DLL file and executes the RegisterClass function.

regasm.exe AllTheThingsx64.dll

Execute

Loads the target .DLL file and executes the UnRegisterClass function.

regasm.exe /U AllTheThingsx64.dll