The Microsoft Deployment Toolkit MSI contains ServiceUI.exe, but you don’t need the whole installer to see how that signed Microsoft binary can be used as a tiny execution cradle. Nice and convenient for attackers, annoying for defenders. Watch the full breakdown on the channel: https://youtu.be/4c...