[DiscordArchive] what's the point of the whole thing then?
[DiscordArchive] what's the point of the whole thing then?
Original source
also runs as admin
rektbyfaith
10-06-2018, 01:08 PM #21Archived author: Warpten • Posted: 2018-10-06T13:08:14.369000+00:00
Original source
also runs as admin
Original source
¯\_(ツ)_/¯
rektbyfaith
10-06-2018, 01:08 PM #22Archived author: Warpten • Posted: 2018-10-06T13:08:16.868000+00:00
Original source
¯\_(ツ)_/¯
Original source
it is nice not to be on windows most of the time
rektbyfaith
10-06-2018, 01:08 PM #23Archived author: Skarn • Posted: 2018-10-06T13:08:30.991000+00:00
Original source
it is nice not to be on windows most of the time
Original source
f ([UACTokenMagic]::CreateProcessWithLogonW("aaa", "bbb", "ccc", 0x00000002, $BinPath, $Args, 0x04000000, $null, $CurrentDirectory,[ref]$StartupInfo, [ref]$ProcessInfo))
rektbyfaith
10-06-2018, 01:08 PM #24Archived author: Warpten • Posted: 2018-10-06T13:08:31.837000+00:00
Original source
f ([UACTokenMagic]::CreateProcessWithLogonW("aaa", "bbb", "ccc", 0x00000002, $BinPath, $Args, 0x04000000, $null, $CurrentDirectory,[ref]$StartupInfo, [ref]$ProcessInfo))
Original source
aaa bbb ccc are dummies, resp user, domain, password
rektbyfaith
10-06-2018, 01:08 PM #25Archived author: Warpten • Posted: 2018-10-06T13:08:40.948000+00:00
Original source
aaa bbb ccc are dummies, resp user, domain, password
Original source
yeah
rektbyfaith
10-06-2018, 01:08 PM #26Archived author: Skarn • Posted: 2018-10-06T13:08:50.593000+00:00
Original source
yeah
Original source
the downloaded exe probably sets up some admin account domain wide
rektbyfaith
10-06-2018, 01:08 PM #27Archived author: Warpten • Posted: 2018-10-06T13:08:52.169000+00:00
Original source
the downloaded exe probably sets up some admin account domain wide
Original source
and then uses that
rektbyfaith
10-06-2018, 01:08 PM #28Archived author: Warpten • Posted: 2018-10-06T13:08:58.777000+00:00
Original source
and then uses that
Original source
most likely locks your system
rektbyfaith
10-06-2018, 01:09 PM #29Archived author: Skarn • Posted: 2018-10-06T13:09:06.246000+00:00
Original source
most likely locks your system
Original source
and encrypts files
rektbyfaith
10-06-2018, 01:09 PM #30Archived author: Skarn • Posted: 2018-10-06T13:09:09.177000+00:00
Original source
and encrypts files
1 Guest(s)
1 Guest(s)