LOLBAS/OSBinaries/Runonce.md

451 B

Runonce.exe

  • Prerequisites
  1. Create HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components[YOURKEY]
  2. Create two Strings : a) @ : Hi from Active Setup b) StubPath : calc.exe
  • Functions: Execute
Runonce.exe /AlternateShellStartup 
 

Acknowledgements:

  • Pierre-Alexandre Braeken - @pabraeken

Resources:

Full path:

c:\windows\system32\runonce.exe

Notes: