wuauclt.exe

~/Privilege Escalation/Windows/Binaries# cat wuauclt.exe.md █

Windows Update Client

Paths:

C:\Windows\System32\wuauclt.exe

Detection: wuauclt run with a parameter of a DLL path

Execute

Full_Path_To_DLL would be the abosolute path to .DLL file and would execute code on attach.

wuauclt.exe /UpdateDeploymentProvider  /RunHandlerComServer