.. / wuauclt.exe
Star

Windows Update Client


Paths:


Resources:
https://dtm.uk/wuauclt/

Acknowledgement:
David Middlehurst - @dtmsecurity


Detection:
wuauclt run with a parameter of a DLL path



Execute

Full_Path_To_DLL would be the abosolute path to .DLL file and would execute code on attach.
wuauclt.exe /UpdateDeploymentProvider  /RunHandlerComServer
Usecase:Execute dll via attach/detach methods
Privileges required:User
OS:Windows 10
Mitre:T1085