Snow Inventory Agent for Windows

2023-09-13 by Luke Humberdross (@ukejjh)

Yet another PowerShell weirdo.

Snow Inventory Agent for Windows (snowagent.exe) runs PowerShell which resembles shellcode (bindshell)

• powershell.exe -command
• Invoke-Expression
• byte arrays
• string encoding operations
• pipes.

Documentation