Wlrmdr.exe

Windows Logon Reminder executable

Execute

Use wlrmdr as a proxy binary to evade defensive countermeasures

wlrmdr.exe -s 3600 -f 0 -t _ -m _ -a 11 -u {PATH:.exe}

Execute executable with wlrmdr.exe as parent process — MITRE: T1202 — Privileges: User