pongooTs

$s='ExLoader','injector','cheat','hack','aimbot','modmenu','trainer';$d="$env:ProgramFiles","$env:ProgramFiles(x86)","$env:LOCALAPPDATA","$env:USERPROFILE\Downloads","$env:TEMP";'=== Suspicious Executables ==='|%{Write-Host $_ -ForegroundColor Cyan};$d|%{gci $_ -r -i *.exe -ea 0|?{$_|?{$s|?{$_.FullName-match$_}}}|%{$_.FullName}};'`n=== Running Processes (Paths) ==='|%{Write-Host $_ -ForegroundColor Cyan};gps|%{try{if($_.Path){$_.Path}}catch{}};'`n=== Browser Registry Entries ==='|%{Write-Host $_ -ForegroundColor Cyan};gci 'HKLM:\SOFTWARE\Clients\StartMenuInternet'|select -Expand Name;'`n=== Windows Install Date ==='|%{Write-Host $_ -ForegroundColor Cyan};(gcim Win32_OperatingSystem).InstallDate;'`n=== Secure Boot / Kernel DMA Protection ==='|%{Write-Host $_ -ForegroundColor Cyan};try{"Secure Boot: "+$(if(Confirm-SecureBootUEFI){"On"}else{"Off"})}catch{"Secure Boot: Cannot determine"};if((gcim Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesConfigured -contains 1){'Kernel DMA P