Regsvcs.exe

Regsvcs and Regasm are Windows command-line utilities that are used to register .NET Component Object Model (COM) assemblies

AWL Bypass

Execute dll file and bypass Application whitelisting

regsvcs.exe {PATH:.dll}

Loads the target .NET DLL file and executes the RegisterClass function. — MITRE: T1218.009 — Privileges: Local Admin

Execute

Execute dll file and bypass Application whitelisting

regsvcs.exe {PATH:.dll}

Loads the target .NET DLL file and executes the RegisterClass function. — MITRE: T1218.009 — Privileges: User