Skip to content

Instantly share code, notes, and snippets.

@JohnLaTwC

JohnLaTwC/gist:5f3d5653ec20e206df7fda206a33db4a

Created October 21, 2020 15:23
Show Gist options
  • Save JohnLaTwC/5f3d5653ec20e206df7fda206a33db4a to your computer and use it in GitHub Desktop.
Save JohnLaTwC/5f3d5653ec20e206df7fda206a33db4a to your computer and use it in GitHub Desktop.
Download ZIP
reg test 32 and 64
Raw
gistfile1.txt
> reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powershell.exe" /reg:64
> reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powershell.exe" /reg:32
> reg query "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\powershell.exe"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment