You are browsing the archive for Autostart (Persistence).

Beyond good ol’ Run key, Part 138

January 23, 2022 in Autostart (Persistence)

This is a post that should have appeared here at least 10 years ago. There is an enigmatic Registry entry: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PeerDist\Extension\PeerdistDllName=peerdist.dll that I came across many times before. The […]

Beyond good ol’ Run key, Part 137

January 22, 2022 in Autostart (Persistence)

This is a neat persistence trick you can use… if you got access to TrustedInstaller… The wininet.dll library in Windows 10+ extends the functionality of InternetErrorDlg function to reach out […]