Register-cimprovider.exe

Used to register new wmi providers

Paths

  • C:\Windows\System32\Register-cimprovider.exe
  • C:\Windows\SysWOW64\Register-cimprovider.exe

Commands

Execute

Load the target .DLL.

Use case: Execute code within dll file

Privileges: User

Register-cimprovider -path {PATH_ABSOLUTE:.dll}

Detection

Resources