Malware Extension Spoofer
by Psych1c - Tuesday January 13, 2026 at 12:16 AM
#11
Thanks for this

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#12
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:

lets see

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#13
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:

ty for sharing
Reply
#14
looks simple but will try, ty for share

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#15
The data type remains application, how is this any different from simply renaming the file?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#16
lit af liked g appreciate it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#17
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:
?????????????????/

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#18
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:
    



thank for sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#19
goona try it thanks for share

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#20
tysmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [ LIST ] 5 FREE STEALERS WITH PROS/CONS elix 398 16,412 2 hours ago
Last Post: obito07
  [Sektor7] Full Recent Course Spearr 36 1,258 3 hours ago
Last Post: Netr0
  PowerShell AMSI Bypass via VEH Loki 43 4,236 4 hours ago
Last Post: NUKEx
  Xordium stealer for Pulsar v2.4.5 nullvex 30 1,377 4 hours ago
Last Post: NUKEx
  Bypass Cookies Encryption | Working FrancisMDouble 10 1,298 Yesterday, 05:28 PM
Last Post: zxACASD

Forum Jump:


 Users browsing this forum: 1 Guest(s)