Technical Information
- '%WINDIR%\explorer.exe' %ALLUSERSPROFILE%\winrm.vbs
- %ALLUSERSPROFILE%\winrm.vbs
- <Current directory>\8dd80000
- %ALLUSERSPROFILE%\winrm.vbs
- %ALLUSERSPROFILE%\winrm.vbs
- <PATH_SAMPLE>.xls
- '%WINDIR%\explorer.exe' %ALLUSERSPROFILE%\winrm.vbs' (with hidden window)
- '<SYSTEM32>\wscript.exe' "%ALLUSERSPROFILE%\winrm.vbs"' (with hidden window)
- '<SYSTEM32>\wscript.exe' "%ALLUSERSPROFILE%\winrm.vbs"