ATMMalScan is a commandline tool for Windows which helps to search for malware traces on an ATM during the DFIR process. Currently ATMMalScan does not support codepages that require Unicode.

https://github.com/fboldewin/ATMMalScan