Malware Extension Spoofer
by Psych1c - Tuesday January 13, 2026 at 12:16 AM
#11
Thanks for this

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#12
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:

lets see

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#13
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:

ty for sharing
Reply
#14
looks simple but will try, ty for share

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#15
The data type remains application, how is this any different from simply renaming the file?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#16
lit af liked g appreciate it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#17
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:
?????????????????/

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#18
(Jan 13, 2026, 12:16 AM)Psych1c Wrote:
PowerShell script that hides the app/malware file extension by padding the filename with spaces.
This method has been covered by John Hammond on his channel and this is simply a slightly improved remake of his code
Example picture: 
[Image: Screenshot-2026-01-12-162542.png]
‎ ‎ 
Example video:
‎ 
Use command:
.\extspooferps.ps1 -FilePath .\malware.exe -NewBasename "innocentfile.jpg" -NewExtension "exe"
‎ ‎ 
Script:
    



thank for sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#19
goona try it thanks for share

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.
Reply
#20
tysmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Python Chrome Data Stealer (url, username/email, password, etc) Discord Webhook mooning 140 9,292 Yesterday, 05:37 PM
Last Post: gergergergerg5825g651eg
  Xordium stealer for Pulsar v2.4.5 nullvex 23 817 Yesterday, 02:48 PM
Last Post: kochamapi4api
  Bypass AV and EDR - Halos Gate from Sektor7 0x01 124 11,021 Apr 25, 2026, 11:13 AM
Last Post: Ususuussss
  Malware On Steroids Carpenter12 0 77 Feb 10, 2026, 07:06 PM
Last Post: Carpenter12
  Best tech for evasion jmpqwordptr 4 157 Feb 09, 2026, 07:29 PM
Last Post: arsium

Forum Jump:


 Users browsing this forum: 1 Guest(s)