Windows Login Script Persistence

Main Function

Achieve persistence by writing the Trojan file path in the registry HKCU\Environment\UserInitMprLogonScript.

Note

This method is not anti-detection.

Operation Method

Refer to Winlogon Helper DLL Persistence