.. /wuauclt.exe
Star

Execute (DLL)

Windows Update Client

Paths:

Resources:

Acknowledgements:

Detections:

Execute

  1. Loads and executes DLL code on attach.

    wuauclt.exe /UpdateDeploymentProvider {PATH_ABSOLUTE:.dll} /RunHandlerComServer
    Use case
    Execute dll via attach/detach methods
    Privileges required
    User
    Operating systems
    Windows 10
    ATT&CK® technique
    T1218
    Tags
    Execute: DLL