webshell

Ghost Exploiter Team Official

C:/Windows/System32/WindowsPowerShell/v1.0/Modules/AppvClient/

File / Folder	Size	Action
.	-
en	--	ren
AppVClientCmdlets.forma...	4.49KB	edt ren
AppVClientCmdlets.psm1	7KB	edt ren
AppvClient.psd1	0.664KB	edt ren
Microsoft.AppV.AppVClie...	106.305KB	edt ren
Microsoft.AppV.AppvClie...	704.305KB	edt ren
Microsoft.AppV.ClientPr...	168.82KB	edt ren

<?xml version="1.0" encoding="utf-8" ?>
<!-- *******************************************************************
This  file contains formatting information used by Get-AppvVirtualProcess cmdlet

******************************************************************** -->

<Configuration>
    <ViewDefinitions>
        <View>
		 <Name>VirtualProcess</Name>
            <ViewSelectedBy>
                <TypeName>System.Diagnostics.Process#AppVVirtualProcess</TypeName>
            </ViewSelectedBy>
            <TableControl>
                <TableHeaders>
                    <TableColumnHeader>
                        <Label>Handles</Label>
                        <Width>7</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>NPM(K)</Label>
                        <Width>7</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>PM(K)</Label>
                        <Width>8</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>WS(K)</Label>
                        <Width>10</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>VM(M)</Label>
                        <Width>5</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>
                    <TableColumnHeader>
                        <Label>CPU(s)</Label>
                        <Width>8</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>
					
					<TableColumnHeader>
                        <Label>ID</Label>
                        <Width>8</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>

<TableColumnHeader>
                        <Label>ProcessName</Label>
                        <Width>15</Width>
                        <Alignment>right</Alignment>
                    </TableColumnHeader>

<TableColumnHeader>
                        <Label>VirtualProcessInformation.UserSid</Label>
                        <Alignment>left</Alignment>
                    </TableColumnHeader>
               
			   </TableHeaders>
                <TableRowEntries>
                    <TableRowEntry>
                        <TableColumnItems>
                            <TableColumnItem>
                                <PropertyName>HandleCount</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <ScriptBlock>[int]($_.NPM / 1024)</ScriptBlock>
                            </TableColumnItem>
                            <TableColumnItem>
                                <ScriptBlock>[int]($_.PM / 1024)</ScriptBlock>
                            </TableColumnItem>
                            <TableColumnItem>
                                <ScriptBlock>[int]($_.WS / 1024)</ScriptBlock>
                            </TableColumnItem>
                            <TableColumnItem>
                                <ScriptBlock>[int]($_.VM / 1048576)</ScriptBlock>
                            </TableColumnItem>
                            <TableColumnItem>
                                <ScriptBlock>
if ($_.CPU -ne $()) 
{ 
    $_.CPU.ToString("N") 
}
				</ScriptBlock>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>Id</PropertyName>
                            </TableColumnItem>
                            <TableColumnItem>
                                <PropertyName>ProcessName</PropertyName>
                            </TableColumnItem>
							<TableColumnItem>
                                 <ScriptBlock>$_.VirtualProcessInformation.UserSid</ScriptBlock>
                            </TableColumnItem>
                        </TableColumnItems>
                    </TableRowEntry>
                </TableRowEntries>
            </TableControl>
        </View>
	</ViewDefinitions>
</Configuration>