Regasm.exe

Part of .NET

AWL Bypass

Execute code and bypass Application whitelisting

regasm.exe {PATH:.dll}

Loads the target .NET DLL file and executes the RegisterClass function. — MITRE: T1218.009 — Privileges: Local Admin

Execute

Execute code and bypass Application whitelisting

regasm.exe /U {PATH:.dll}

Loads the target .DLL file and executes the UnRegisterClass function. — MITRE: T1218.009 — Privileges: User