Used by group policy to process scripts

Paths:

C:\Windows\System32\gpscript.exe
C:\Windows\SysWOW64\gpscript.exe

Detection: Scripts added in local group policy Execution of Gpscript.exe after logon

Execute

Executes logon scripts configured in Group Policy.

Gpscript /logon

Executes startup scripts configured in Group Policy

Gpscript /startup