Техническая информация
- '<SYSTEM32>\ping.exe' 127.0.0.1
- '<SYSTEM32>\xcopy.exe' hosts.txt <DRIVERS>\etc\ /y
- '<SYSTEM32>\attrib.exe' -r -a -s -h <DRIVERS>\etc\hosts
- '<SYSTEM32>\wscript.exe' "C:\RavBin\1.vbs"
- '<SYSTEM32>\cacls.exe' <DRIVERS>\etc\hosts /g everyone:f
- C:\RavBin\1.vbs
- C:\RavBin\1.bat
- C:\RavBin\hosts.txt
- <DRIVERS>\etc\hosts
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'