Skip to content

Commit 1d863de

Browse files
1 parent 960fa25 commit 1d863de

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

_lolbas/Binaries/Regsvr32.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,24 @@ Commands:
4242
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
4343
Tags:
4444
- Execute: SCT
45+
- Command: regsvr32.exe /s {PATH:.dll}
46+
Description: Execute code in a DLL. The code must be inside the exported function `DllRegisterServer`.
47+
Usecase: Execute DLL file
48+
Category: Execute
49+
Privileges: User
50+
MitreID: T1218.010
51+
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
52+
Tags:
53+
- Execute: DLL
54+
- Command: regsvr32.exe /u /s {PATH:.dll}
55+
Description: Execute code in a DLL. The code must be inside the exported function `DllUnRegisterServer`.
56+
Usecase: Execute DLL file
57+
Category: Execute
58+
Privileges: User
59+
MitreID: T1218.010
60+
OperatingSystem: Windows vista, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 11
61+
Tags:
62+
- Execute: DLL
4563
Full_Path:
4664
- Path: C:\Windows\System32\regsvr32.exe
4765
- Path: C:\Windows\SysWOW64\regsvr32.exe

0 commit comments

Comments
 (0)