(PowerShell) Right-to-Left Override (RLO) Extension Spoofing by Jean-Pierre LESUEUR

Created the Thursday 03 August 2023. Updated 6 months, 4 weeks ago.

Description:

In this example malware.exe becomes Annexe.jpeg but keeps its executable properties.

Code

            Rename-Item -Path malware.exe -NewName ("Ann" + ( [char]0x202E) + "gepj.exe")