wuauclt.exe

Windows Update Client

Execute

Execute dll via attach/detach methods

wuauclt.exe /UpdateDeploymentProvider {PATH_ABSOLUTE:.dll} /RunHandlerComServer

Loads and executes DLL code on attach. — MITRE: T1218 — Privileges: User