webshell

Ghost Exploiter Team Official

C:/Windows/diagnostics/scheduled/Maintenance/

File / Folder	Size	Action
.	-
en-US	--	ren
CL_Utility.ps1	13.543KB	edt ren
DiagPackage.diagpkg	11.156KB	edt ren
DiagPackage.dll	84KB	edt ren
RS_AdminDiagnosticHisto...	1.124KB	edt ren
RS_MachineWERQueue.ps1	1.805KB	edt ren
RS_SyncSystemTime.ps1	1.854KB	edt ren
RS_UserDiagnosticHistor...	1.11KB	edt ren
RS_UserWERQueue.ps1	1.76KB	edt ren
TS_DiagnosticHistory.ps1	2.532KB	edt ren
TS_InaccurateSystemTime...	4.4KB	edt ren
TS_WERQueue.ps1	2.772KB	edt ren

<dcmPS:AdvDiagnosticPackage SchemaVersion="1.0" Localized="true" xmlns:dcmPS="http://www.microsoft.com/schemas/dcm/package/2007" xmlns:dcmRS="http://www.microsoft.com/schemas/dcm/resource/2007" xmlns:wdem="http://diagnostics.microsoft.com/2007/08/WindowsDiagnosticExtendedMetadata">
  <DiagnosticIdentification>
    <ID>MaintenanceDiagnostic</ID>
    <Version>1.0</Version>
  </DiagnosticIdentification>
  <DisplayInformation>
    <Parameters/>
    <Name>@diagpackage.dll,-1</Name>
    <Description>@diagpackage.dll,-2</Description>
  </DisplayInformation>
  <PrivacyLink>https://go.microsoft.com/fwlink/?LinkId=534597</PrivacyLink>
  <PowerShellVersion>2.0</PowerShellVersion>
  <SupportedOSVersion clientSupported="true" serverSupported="true">6.1</SupportedOSVersion>
  <Rootcauses>
    
    <Rootcause>
      <ID>RC_WERQueue</ID>
      <DisplayInformation>
        <Parameters>
          <Parameter>
            <Name>UnwantedSpace</Name>
            <DefaultValue/>
          </Parameter>
        </Parameters>
        <Name>@diagpackage.dll,-2013</Name>
        <Description>@diagpackage.dll,-2014</Description>
      </DisplayInformation>
      <Troubleshooter>
        <Script>
          <Parameters/>
          <ProcessArchitecture>Any</ProcessArchitecture>
          <RequiresElevation>true</RequiresElevation>
          <RequiresInteractivity>false</RequiresInteractivity>
          <FileName>TS_WERQueue.ps1</FileName>
          <ExtensionPoint/>
        </Script>
        <ExtensionPoint/>
      </Troubleshooter>
      <Resolvers>
        <Resolver>
          <ID>RS_MachineWERQueue</ID>
          <DisplayInformation>
            <Parameters/>
            <Name>@diagpackage.dll,-2015</Name>
            <Description>@diagpackage.dll,-2016</Description>
          </DisplayInformation>
          <RequiresConsent>false</RequiresConsent>
          <Script>
            <Parameters>
              <Parameter>
                <Name>UnwantedSpace</Name>
                <DefaultValue/>
              </Parameter>
            </Parameters>
            <ProcessArchitecture>Any</ProcessArchitecture>
            <RequiresElevation>true</RequiresElevation>
            <RequiresInteractivity>false</RequiresInteractivity>
            <FileName>RS_MachineWERQueue.ps1</FileName>
            <ExtensionPoint/>
          </Script>
          <ExtensionPoint/>
        </Resolver>
        <Resolver>
          <ID>RS_UserWERQueue</ID>
          <DisplayInformation>
            <Parameters/>
            <Name>@diagpackage.dll,-2017</Name>
            <Description>@diagpackage.dll,-2018</Description>
          </DisplayInformation>
          <RequiresConsent>false</RequiresConsent>
          <Script>
            <Parameters>
              <Parameter>
                <Name>UnwantedSpace</Name>
                <DefaultValue/>
              </Parameter>
            </Parameters>
            <ProcessArchitecture>Any</ProcessArchitecture>
            <RequiresElevation>false</RequiresElevation>
            <RequiresInteractivity>false</RequiresInteractivity>
            <FileName>RS_UserWERQueue.ps1</FileName>
            <ExtensionPoint/>
          </Script>
          <ExtensionPoint/>
        </Resolver>
      </Resolvers>
      <Verifier>
        <Script>
          <Parameters/>
          <ProcessArchitecture>Any</ProcessArchitecture>
          <RequiresElevation>true</RequiresElevation>
          <RequiresInteractivity>false</RequiresInteractivity>
          <FileName>TS_WERQueue.ps1</FileName>
          <ExtensionPoint/>
        </Script>
        <ExtensionPoint/>
      </Verifier>
      <ContextParameters/>
      <ExtensionPoint/>
    </Rootcause>
    <Rootcause>
      <ID>RC_DiagnosticHistory</ID>
      <DisplayInformation>
        <Parameters>
          <Parameter>
            <Name>UnwantedSpace</Name>
            <DefaultValue/>
          </Parameter>
        </Parameters>
        <Name>@diagpackage.dll,-2019</Name>
        <Description>@diagpackage.dll,-2020</Description>
      </DisplayInformation>
      <Troubleshooter>
        <Script>
          <Parameters/>
          <ProcessArchitecture>Any</ProcessArchitecture>
          <RequiresElevation>true</RequiresElevation>
          <RequiresInteractivity>false</RequiresInteractivity>
          <FileName>TS_DiagnosticHistory.ps1</FileName>
          <ExtensionPoint/>
        </Script>
        <ExtensionPoint/>
      </Troubleshooter>
      <Resolvers>
        <Resolver>
          <ID>RS_UserDiagnosticHistory</ID>
          <DisplayInformation>
            <Parameters/>
            <Name>@diagpackage.dll,-2025</Name>
            <Description>@diagpackage.dll,-2026</Description>
          </DisplayInformation>
          <RequiresConsent>false</RequiresConsent>
          <Script>
            <Parameters>
              <Parameter>
                <Name>UnwantedSpace</Name>
                <DefaultValue/>
              </Parameter>
            </Parameters>
            <ProcessArchitecture>Any</ProcessArchitecture>
            <RequiresElevation>false</RequiresElevation>
            <RequiresInteractivity>false</RequiresInteractivity>
            <FileName>RS_UserDiagnosticHistory.ps1</FileName>
            <ExtensionPoint/>
          </Script>
          <ExtensionPoint/>
        </Resolver>
        <Resolver>
          <ID>RS_AdminDiagnosticHistory</ID>
          <DisplayInformation>
            <Parameters/>
            <Name>@diagpackage.dll,-2035</Name>
            <Description>@diagpackage.dll,-2036</Description>
          </DisplayInformation>
          <RequiresConsent>false</RequiresConsent>
          <Script>
            <Parameters>
              <Parameter>
                <Name>UnwantedSpace</Name>
                <DefaultValue/>
              </Parameter>
            </Parameters>
            <ProcessArchitecture>Any</ProcessArchitecture>
            <RequiresElevation>true</RequiresElevation>
            <RequiresInteractivity>false</RequiresInteractivity>
            <FileName>RS_AdminDiagnosticHistory.ps1</FileName>
            <ExtensionPoint/>
          </Script>
          <ExtensionPoint/>
        </Resolver>
      </Resolvers>
      <Verifier>
        <Script>
          <Parameters/>
          <ProcessArchitecture>Any</ProcessArchitecture>
          <RequiresElevation>true</RequiresElevation>
          <RequiresInteractivity>false</RequiresInteractivity>
          <FileName>TS_DiagnosticHistory.ps1</FileName>
          <ExtensionPoint/>
        </Script>
        <ExtensionPoint/>
      </Verifier>
      <ContextParameters/>
      <ExtensionPoint/>
    </Rootcause>
  </Rootcauses>
  <Interactions>
      <SingleResponseInteractions/>
      <MultipleResponseInteractions>
               <MultipleResponseInteraction>
                <AllowDynamicResponses>true</AllowDynamicResponses>
                <Choices/>
                <ID>IT_GetUnusedIconsToCleanup</ID>
                <DisplayInformation>
                  <Parameters/>
                  <Name>@diagpackage.dll,-511</Name>
                  <Description>@diagpackage.dll,-514</Description>
                </DisplayInformation>
                <ContextParameters/>
                <ExtensionPoint/>
              </MultipleResponseInteraction>
      </MultipleResponseInteractions>
      <TextInteractions/>
      <PauseInteractions/>
      <LaunchUIInteractions/>
  </Interactions>
  <ExtensionPoint>
    <Notification>
      <EventID>100</EventID>
      <EventVersion>0</EventVersion>
      <EventData>
        <DefaultStateID>0</DefaultStateID>
        <DisabledStateID>2</DisabledStateID>
        <StateID>1</StateID>
      </EventData>
    </Notification>
    <Maintenance/>
    <Icon>@DiagPackage.dll,-2000</Icon>
    <HelpKeywords>@DiagPackage.dll,-1003</HelpKeywords>
    <HelpKeywords>@DiagPackage.dll,-1004</HelpKeywords>
    <HelpKeywords>@DiagPackage.dll,-1005</HelpKeywords>
  </ExtensionPoint>
</dcmPS:AdvDiagnosticPackage>

<=Back