Backups
ps c:\> ls
directory: C:\
Mode LastWriteTime Length Name
---- ------------- ------ ----
d----- 26-1-2023 12:57 Backups
d----- 12-9-2016 13:35 Logs
d----- 22-2-2019 14:42 PerfLogs
d-r--- 31-1-2022 17:39 Program Files
d----- 22-2-2019 14:01 Program Files (x86)
d-r--- 22-2-2019 13:50 Users
d----- 31-1-2022 17:52 Windows upon completing some basic enumeration, i found a directory at the system root; c:\Backups
ps c:\> cd Backups ; ls
directory: C:\Backups
Mode LastWriteTime Length Name
---- ------------- ------ ----
d----- 26-1-2023 11:44 NRWAFGSGPB
d----- 22-2-2019 13:44 WindowsImageBackup
-a---- 26-1-2023 11:44 260 nmap-test-file
-ar--- 16-4-2019 12:10 116 note.txt
-a---- 22-2-2019 13:43 0 SDT65CB.tmp I think that this directory must be \\BASTION\Backups over SMB