webshell

Ghost Exploiter Team Official

C:/ProgramData/Microsoft/Windows Defender/Platform/4.18.25050.5-0/Powershell/

File / Folder	Size	Action
.	-
Defender.psd1	15.198KB	edt ren
DefenderPerformance.psd1	14.194KB	edt ren
MSFT_MpBehavioralNetwor...	16.115KB	edt ren
MSFT_MpComputerStatus.c...	15.454KB	edt ren
MSFT_MpPerformanceRecor...	78.791KB	edt ren
MSFT_MpPerformanceRecor...	4.854KB	edt ren
MSFT_MpPerformanceRepor...	87.13KB	edt ren
MSFT_MpPreference.cdxml	144.054KB	edt ren
MSFT_MpRollback.cdxml	16.244KB	edt ren
MSFT_MpScan.cdxml	16.751KB	edt ren
MSFT_MpSignature.cdxml	16.735KB	edt ren
MSFT_MpThreat.cdxml	16.328KB	edt ren
MSFT_MpThreatCatalog.cdxml	15.876KB	edt ren
MSFT_MpThreatDetection....	15.876KB	edt ren
MSFT_MpWDOScan.cdxml	15.66KB	edt ren

<?xml version="1.0" encoding="utf-8"?>
<PowerShellMetadata xmlns="http://schemas.microsoft.com/cmdlets-over-objects/2009/11">
  <Class ClassName="ROOT\Microsoft\Windows\Defender\MSFT_MpScan" ClassVersion="1.0">
    <Version>1.0</Version>
    <DefaultNoun>MpScan</DefaultNoun>
    <StaticCmdlets>
      <Cmdlet>
        <CmdletMetadata Verb="Start" />
        <Method MethodName="Start">
          <ReturnValue>
            <Type PSType="System.Int32" />
            <CmdletOutputMetadata>
              <ErrorCode />
            </CmdletOutputMetadata>
          </ReturnValue>
          <Parameters>
            <Parameter ParameterName="ScanPath">
              <Type PSType="System.String" />
              <CmdletParameterMetadata>
                <ValidateNotNull />
                <ValidateNotNullOrEmpty />
              </CmdletParameterMetadata>
            </Parameter>
            <Parameter ParameterName="ScanType">
              <Type PSType="MpScan.ScanType" />
              <CmdletParameterMetadata>
                <ValidateNotNull />
                <ValidateNotNullOrEmpty />
                <ValidateSet>
                  <AllowedValue>FullScan</AllowedValue>
                  <AllowedValue>QuickScan</AllowedValue>
                  <AllowedValue>CustomScan</AllowedValue>
                </ValidateSet>
              </CmdletParameterMetadata>
            </Parameter>
          </Parameters>
        </Method>
      </Cmdlet>
    </StaticCmdlets>
  </Class>
    <Enums>
        <Enum EnumName="MpScan.ScanType" UnderlyingType="System.Byte">
            <Value Name="QuickScan" Value="1" />
            <Value Name="FullScan" Value="2" />
            <Value Name="CustomScan" Value="3" />
        </Enum>      
    </Enums>
</PowerShellMetadata>