Payload.dd Payload.dd is a ducky payload to download and install Payload.bat. Payload.bat Payload.bat starts the fake win update website and writes in the background an vbs file to the temp folder which puts the website in fullscreen and then deletes itself.