Forum Discussion
hwidjaja_37598
Dec 30, 2010Altostratus
Yes, it seems like winexe copies winexesvc.exe to ADMIN$ share, creates winexesvc service, starts it and tries to connect to this service.
I personally prefer using wmi as most of windows server already running wmi and it doesn't fork another process, CMIIW ...