03 : /Privilege-escalation Windows#

~/ cat Ilasm.exe.md

used for compile c# code into dll or exe.

Paths:

C:\Windows\Microsoft.NET\Framework\v4.0.30319\ilasm.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ilasm.exe

Detection:

Compile

Binary file used by .NET to compile c# code to .exe

ilasm.exe C:\public\test.txt /exe

Binary file used by .NET to compile c# code to dll

ilasm.exe C:\public\test.txt /dll