T1218.004Stealth
InstallUtil
Adversaries may use InstallUtil to proxy execution of code through a trusted Windows utility. InstallUtil is a command-line utility that allows for installation and uninstallation of resources by executing specific installer components specified in.NET binaries. The InstallUtil binary may also be digitally signed by Microsoft and located in the.NET directories on a Windows system…
CVEs0
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
CVEs linked to InstallUtil
0 CVEs, by priority. Each link shows its badge.No CVEs are linked to this technique yet.