Function ListStartMenuLnkPersistence

windowslnkparser.go:60–87

ListStartMenuLnkPersistence check for every *.lnk in Windows StartMenu folders and extract every executable path in those links

(verbose bool)

// ListStartMenuLnkPersistence check for every *.lnk in Windows StartMenu folders and extract every executable path in those links
func ListStartMenuLnkPersistence(verbose bool) (exePath []string, errors []error) {

	startMenuFolders, err := ListStartMenuFolders(verbose)
	if err != nil {
		errors = append(errors, err)
	}

	for _, path := range startMenuFolders {

		files, err := RetrivesFilesFromUserPath(path, true, []string{".lnk"}, false, verbose)

		if err != nil {
			errors = append(errors, fmt.Errorf("%s - %s", path, err.Error()))
		}

		for _, p := range files {
			lnk, lnkErr := golnk.File(p)
			if lnkErr != nil {
				errors = append(errors, fmt.Errorf("%s - Lnk parse error", p))
				continue
			}

			exePath = append(exePath, lnk.LinkInfo.LocalBasePath)
		}
	}

	return exePath, errors
}