Secondary Categories: 02-Persistence

If you are already an administrator on the system you can use Print Monitors to execute a DLL.

  • Go to HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\
  • Create a new key like Microsoft Shared Fax Monitor
  • Create a new value named Driver with a DLL name

Also Check Out:

  • PLACEHOLDER