Execute calc.exe with wlrmdr.exe as parent process
wlrmdr.exe -s 3600 -f 0 -t _ -m _ -a 11 -u calc.exe
- Use case
- Use wlrmdr as a proxy binary to evade defensive countermeasures
- Privileges required
- User
- Operating systems
- Windows 10, Windows 11
- ATT&CK® technique
- T1202
- Tags
Execute: EXE