Malware-Note/process/creat-new-process.md

13 lines
634 B
Markdown
Raw Permalink Normal View History

2021-05-16 10:08:17 -07:00
# 启动进程
WMI:
```text
wmic process call create "\\?\UNC\127.0.0.1\C$\windows\system32\calc.exe"
wmic process call create "\\.\GLOBALROOT\??\UNC\127.0.0.1\C$\windows\system32\calc.exe"
wmic process call create "\\;lanmanredirector\127.0.0.1\C$\windows\system32\calc.exe"
wmic process call create "\\.\globalroot\osdataroot\windows\notepad.exe"
wmic process call create "\\.\global\globalroot\device\mup\;lanmanredirector\.\localhost\c$\\windows\:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data:$data nul..\ /..\..\write.exe"
```