Benign windows Download

amsi_bypass_dll.go

Go Cgo native interfacepowershell keyword
SHA-25604e4751c7c9dae7e12ee4776b8b691a41da34c5b31a7c8ee4827e7dec77db9b9
MaleculeH₂(DsPo)

Evidence

Go Cgo native interface lines 3–5
3import "C"
4import (
5 "github.com/MrTuxx/OffensiveGolang/pkg/evasion"
powershell keyword lines 8–11
8//export ByPass
9func ByPass() {
10 evasion.AMSIByPass("powershell.exe")
11}

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.