regsvcs.exe: LOLBin Used in VEIL#DROP Fallback Execution
regsvcs.exe, a Microsoft-signed binary, was used as a living-off-the-land binary in the VEIL#DROP campaign for fallback execution of .NET assemblies.
regsvcs.exe, a Microsoft-signed binary, was used as a living-off-the-land binary in the VEIL#DROP campaign for fallback execution of .NET assemblies.
installutil.exe, a Microsoft-signed binary, was used as a living-off-the-land binary in the VEIL#DROP campaign for fallback execution of .NET assemblies.
msbuild.exe, a Microsoft-signed binary, was used as a living-off-the-land binary in the VEIL#DROP campaign for fallback execution of .NET assemblies.
aspnet_compiler.exe, a Microsoft-signed binary, was used as a living-off-the-land binary in the VEIL#DROP campaign for fallback execution of .NET assemblies.