I haven't 100% figured out why, but the third line (the one that decodes) on the powershell script of UrAttaControl trips the antivirus
This script contains malicious content and has been blocked by your antivirus software
The machine which the AV trips is running:
Edition: Windows 10 Home
Version: 22H2
OS Build: 19045.3930
Experience: Windows Feature Experience Pack 1000.19053.1000.0
I have one other machine that can execute the same script without tripping the AV:
Edition Windows 10 Pro
Version 22H2
OS build 19045.4046
Experience Windows Feature Experience Pack 1000.19053.1000.0
Not sure if the decoding and executing snipped needs a new coat of obfuscation.
I haven't 100% figured out why, but the third line (the one that decodes) on the powershell script of UrAttaControl trips the antivirus
This script contains malicious content and has been blocked by your antivirus softwareThe machine which the AV trips is running:
Edition: Windows 10 Home
Version: 22H2
OS Build: 19045.3930
Experience: Windows Feature Experience Pack 1000.19053.1000.0
I have one other machine that can execute the same script without tripping the AV:
Edition Windows 10 Pro
Version 22H2
OS build 19045.4046
Experience Windows Feature Experience Pack 1000.19053.1000.0
Not sure if the decoding and executing snipped needs a new coat of obfuscation.