Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" whoami >> "C:\Users\Jonathan\AppData\Roaming\Microsoft\ttmp.log"
- "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" tasklist >> "C:\Users\Jonathan\AppData\Roaming\Microsoft\ttmp.log"
- "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" dir "$env:appdata\Microsoft\*.*" >> "C:\Users\Jonathan\AppData\Roaming\Microsoft\ttmp.log"
- "C:\Windows\System32\certutil.exe" -f -encode "C:\Users\Jonathan\AppData\Roaming\Microsoft\ttmp.log" "C:\Users\Jonathan\AppData\Roaming\Microsoft\ttmp1.log"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
