WriteConsoleW
|
buffer:
Directory: C:\ProgramData
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Mode LastWriteTime Length Name
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
d---- 2023-08-24 오전 9:20 TUKHAMTASSER
console_handle:
0x00000037
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invoke-Expression : Unexpected token '(' in expression or statement.
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At line:10 char:30
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ Decode-BinaryToText $AMI | . <<<< ('{x}{9}'.replace('9','0').replace('x','1'
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
)-f'Pussy','%%').replace('%%','I').replace('Pussy','EX')
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : ParserError: ((:String) [Invoke-Expression], Par
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
seException
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : UnexpectedToken,Microsoft.PowerShell.Commands.In
console_handle:
0x0000006b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
vokeExpressionCommand
console_handle:
0x00000077
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
You cannot call a method on a null-valued expression.
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At line:32 char:36
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ $invokeMethod = $type.GetMethod <<<< ($method)
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidOperation: (GetMethod:String) [], Runtime
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Exception
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : InvokeMethodOnNull
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
You cannot call a method on a null-valued expression.
console_handle:
0x0000007f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At line:39 char:25
console_handle:
0x0000008b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ $invokeMethod.Invoke <<<< ($nullArray, ($v4Path, $data2))
console_handle:
0x00000097
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidOperation: (Invoke:String) [], RuntimeExc
console_handle:
0x000000a3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
eption
console_handle:
0x000000af
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : InvokeMethodOnNull
console_handle:
0x000000bb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
You cannot call a method on a null-valued expression.
console_handle:
0x000000db
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At line:40 char:25
console_handle:
0x000000e7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ $invokeMethod.Invoke <<<< ($nullArray, ($v2Path, $data2))
console_handle:
0x000000f3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidOperation: (Invoke:String) [], RuntimeExc
console_handle:
0x000000ff
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
eption
console_handle:
0x0000010b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : InvokeMethodOnNull
console_handle:
0x00000117
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
You cannot call a method on a null-valued expression.
console_handle:
0x00000137
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At line:41 char:25
console_handle:
0x00000143
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ $invokeMethod.Invoke <<<< ($nullArray, ($v3Path, $data2))
console_handle:
0x0000014f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidOperation: (Invoke:String) [], RuntimeExc
console_handle:
0x0000015b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
eption
console_handle:
0x00000167
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : InvokeMethodOnNull
console_handle:
0x00000173
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Remove-Item : Cannot find path 'C:\Users\test22\AppData\Local\Temp\d9e1c3_337d7
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
02a7383407ea927e15f24052b8b.txt.ps1' because it does not exist.
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\d9e1c3_337d702a7383407ea927e15f24052b8b.t
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
xt.ps1:59 char:12
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ Remove-Item <<<< $scriptPath -Force
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : ObjectNotFound: (C:\Users\test22...4052b8b.txt.p
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
s1:String) [Remove-Item], ItemNotFoundException
console_handle:
0x0000006b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.Remov
console_handle:
0x00000077
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
eItemCommand
console_handle:
0x00000083
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
SUCCESS: The scheduled task "clomepe" has successfully been created.
console_handle:
0x00000007
|
1
|
1 |
0
|