OpenClaw Trojanizado - Decodificação em Memória e Evasão via Windows Defender
Detects two distinct malicious PowerShell behaviors: memory-resident script execution using Base64 and XOR obfuscation, and unauthorized modification of Windows Defender preferences to add exclusions.
CQL
