~/Privilege Escalation/Windows/Binaries# cat Regsvcs.exe.md █
Regsvcs and Regasm are Windows command-line utilities that are used to register .NET Component Object Model (COM) assemblies
Paths:
C:\Windows\System32\regsvcs.exe
C:\Windows\SysWOW64\regsvcs.exe
Detection:
Execute
Loads the target .DLL file and executes the RegisterClass function.
regsvcs.exe AllTheThingsx64.dll
AWL bypass
Loads the target .DLL file and executes the RegisterClass function.
regsvcs.exe AllTheThingsx64.dll