1
00:00:00,028 --> 00:00:06,294
打开 Windows 10 LTSC 2021 隔离虚拟机

2
00:00:06,294 --> 00:00:12,294
复制新版 PCL 2.99.0.1 压缩包到桌面

3
00:00:12,294 --> 00:00:21,200
解压到桌面

4
00:00:21,200 --> 00:00:55,841
运行 PoC：伪造公告服务器、hosts 与自签 CA

5
00:00:55,841 --> 00:01:08,809
方法一：LaunchAdvanceRun 已被 2.99.0.1 拉黑，payload 未执行

6
00:01:08,809 --> 00:01:17,247
删掉整个 PCL

7
00:01:17,247 --> 00:01:34,680
方法二：notice.cfg + slientupdate → 静默更新 → 任意 exe

8
00:01:34,680 --> 00:01:51,289
零点击成功：PCL 退出时执行下载的 exe

9
00:01:51,289 --> 00:02:03,289
结论：方法一被堵，方法二仍然可用