MCPcopy Create free account
hub / github.com/Pizz33/GobypassAV-shellcode / NoBlockComputerName

Function NoBlockComputerName

Anti sandbox/name.go:1–31  ·  view source on GitHub ↗
()

Source from the content-addressed store, hash-verified

1func NoBlockComputerName() {
2 known := []string{
3 "REVTS1RPUC1IOVVSQjdU",
4 /* "N1NJTFZJQQ==",
5 "SEFOU1BFVEVSLVBD",
6 "Sk9ITi1QQw==",
7 "TVVFTExFUi1QQw==",
8 "V0lONy1UUkFQUw==",
9 "Rk9SVElORVQ=",
10 "VEVRVUlMQUJPT01CT09N",
11 "VkJDQ1NDLVBD",
12 "REVTS1RPUC1TVk9OWFlE",
13 "V0lOLTJIQlhTUktXQ1JZ",
14 "V0lOLTJIQlhTUktXQ1JZ",
15 "V0lOLUlWRTk5SlRURVE2",
16 "V0lOLUhIUU1RRENCVDdF",
17 "MENDNDdBQzgzODAz",
18 "QU1BWklORy1BVk9DQURP",
19 "cmJtaHV3dmNpbmc=",
20 "U1RBQ0FTODQ=",
21 "U0RKLUZGRDBGRUIwNURD", */
22 }
23
24 name, _ := os.Hostname()
25
26 for _, v := range known {
27 if base64.URLEncoding.EncodeToString([]byte(v)) == name {
28 os.Exit(0)
29 }
30 }
31}
32
33func NoBlockUserProcess() {
34 known := []string{

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected