Description
-
mavinject.exe is a legitimate Windows component that can perform arbitrary code injection into any running process. Because this is a common component on Windows, it can be used to carry out living-off-the-land attacks. Depending on the target process architecture (32-bit or 64-bit), it injects one of the DLLs.
-
Its absolute paths on Windows are as follows:
C:\Windows\System32\mavinject.exe
C:\Windows\SysWOW64\mavinject.exe
Main Usage
- For DLL Injection, the usage is as follows:
mavinject.exe PROCESSID /INJECTRUNNING Path\To\Payload.dll