WTFBins

Snow Inventory Agent for Windows (snowagent.exe) runs PowerShell which resembles shellcode (bindshell)

• powershell.exe -command
• Invoke-Expression
• byte arrays
• string encoding operations
• pipes.