Persistence using GlobalFlags in Image File Execution Options – Hidden from Autoruns.exe
Blog post about abusing GlobalFlag for process execution.
- from
- Malware Persistence
- added
- 2026-10-10
- likes
- 0
similar
-
Malware persistence techniques andreafortuna.org
Good summary of multiple persistence mechanisms, ranging from multiple registry keys to more advanced one, like COM hijacking.
-
Autoruns technet.microsoft.com
A powerful persistence collection tool on Windows is Autoruns. It collects different categories and persistence information from a live system and in limited ways from offline images. There is a UI and a command line program and the output format can be set to CSV which can…
-
Hexacorn's blog hexacorn.com
Blog series "Beyond good ol' Run key" covering a lot of Windows persistence mechanisms.
-
Autoruns docs.microsoft.com
You can learn which Windows persistence mechanisms are checked by looking at the output of Autoruns on your own client. Categories and the different locations where things were found are seen in the output. A disassembly of Autoruns lists a subset of the entries which are…
-
Common malware persistence mechanisms resources.infosecinstitute.com
Different persistence mechanisms for different vectors are described.
-
Malware Persistence github.com
Malware Persistence › Techniques > Windows: “Blog post about abusing GlobalFlag for process execution.”