Câu 61: GCIH: GIAC Certified Incident Handler

The provided screenshot shows output from running the SysInternals "Strings" command against a suspected malware executable. Which of the following strings indicate that the attacker is attempting to gain persistence on the target system?

1. A. cmd.exe /c start/max http://www.midnitemeerkats.com/note
2. B. This program cannot be run in DOS mode
3. C. Software\Microsoft\Windows\CurrentVersion\Run
4. D. powershell.exe -ExecutionPolicyBypass -EncodedCommand — đáp án hiện tại