path-ads

An alternate data stream hid on the name. I checked the file with a stream scanner and pulled the hidden payload before it could execute.