Snow Inventory Agent for Windows
Contributed By: Luke Humberdross (@ukejjh)
Snow Inventory Agent for Windows (snowagent.exe
) runs PowerShell which resembles shellcode (bindshell)
powershell.exe -command
Invoke-Expression
- byte arrays
- string encoding operations
- pipes.
![](https://user-images.githubusercontent.com/46994024/187198158-949af632-82ae-4211-a8db-fadbcec4962d.png)