$Home\Desktop$env:APPDATA\Roaming\Microsoft\Windows\Start Menu
| Criteria | Value |
|---|---|
| Permissions | User |
| Security context | User |
| Persistence type | Other |
| Code type | EXE |
| Launch type | User initiated |
| Impact | Destructive1 |
| OS Version | All OS versions |
| Dependencies | OS only |
| Toolset | Scriptable |
It is possible to replace the function of keyboard shortcuts or individual keys. Each time the key is pressed, the stored payload is executed.
https://www.hexacorn.com/blog/2015/03/13/beyond-good-ol-run-key-part-29/
Footnotes
-
The original function of the key or keyboard shortcut will be overwritten. ↩