Skip to content
← LibraryTechnique entry
LOL-INSTALLUTILExecution

installutil.exe / regsvcs / regasm Proxy

.NET Framework signed-binary execution chain for AppLocker bypass.

§ Where this technique fits

LOL-INSTALLUTIL is catalogued under the Execution tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.