Why would different JetBrains IDE products need to query the installed antivirus product in the exact same way that malicious programs do?
The wmi command is the following:
wmic /namespace:\\root\securitycenter2 path antivirusproduct get displayname,productstate
I observed this command coming from idea64 (intellij) and pycharm, both of which are IDE programs designed by jetbrains. I cant understand why an IDE would need to perform this activity.
This wmi query if googled comes up as a common malicious behavior to detect the security products on the device, and whether or not they are running. Anyone got any insight into this?