We use an anti-virus software against Ransomware in our company (Trend Micro). This usually causes the problem that exe files created with Powershell Studio are blocked. The heuristics of the protection software here probably assesses the fact that Powershell code is executed from an encrypted exe file as potentially "ransomware-like".
The execution as ps1 or via the scriptdriver is no problem.
It would be very helpful if it´s possible to choose an option to omit the encryption during packet building.
Best regards
jewver
[PSS] build exe file without encryption
Forum rules
Do not post any licensing information in this forum.
Do not post any licensing information in this forum.
Re: [PSS] build exe file without encryption
That you for the request. I added it to our feature wish list.
David
SAPIEN Technologies, Inc.
SAPIEN Technologies, Inc.
- Alexander Riedel
- Posts: 8478
- Last visit: Tue Mar 26, 2024 8:52 am
- Been upvoted: 37 times
Re: [PSS] build exe file without encryption
"... here probably assesses ..."
I am reading this as a guess on your part. I would submit that Trend Micro has no idea how that code is stored, nor would it care.
Without any actual error messages or logs it it very hard to determine what Trend Micro actually complains about. So if you could submit that information that would be very helpful.
We do have a script packager option in PrimalScript that runs your extracted script as a temporary file, akin to scriptdriver. I am not sure at the moment if that engine is included in PowerShell Studio, but I will talk to the team.
I am reading this as a guess on your part. I would submit that Trend Micro has no idea how that code is stored, nor would it care.
Without any actual error messages or logs it it very hard to determine what Trend Micro actually complains about. So if you could submit that information that would be very helpful.
We do have a script packager option in PrimalScript that runs your extracted script as a temporary file, akin to scriptdriver. I am not sure at the moment if that engine is included in PowerShell Studio, but I will talk to the team.
Alexander Riedel
SAPIEN Technologies, Inc.
SAPIEN Technologies, Inc.
Re: [PSS] build exe file without encryption
Hi Alexander
the message is : "Unauthorized File Encryption"
I have attached a screen copy.
Best regards,
jewver
the message is : "Unauthorized File Encryption"
I have attached a screen copy.
Best regards,
jewver
- Attachments
-
- 000934.jpg (235.85 KiB) Viewed 3382 times