Operator On The Wire
Join
← Back to Knowledge Base
BLUE TEAM / MALWARE REVERSE / ANALYSIS / STATIC / FILES

LNK

Powershell Native Inspect

$shell = New-Object -ComObject WScript.Shell  
$lnk = $shell.CreateShortcut("EU_Health_Compliance_Portal.lnk")  
$lnk.TargetPath  
$lnk.Arguments  
$lnk.WorkingDirectory  
$lnk.IconLocation