webshell

Ghost Exploiter Team Official

File / Folder	Size	Action
.	-
oobeSystem.uaq	1.002KB	edt ren
specialize.uaq	2.354KB	edt ren

<?xml version="1.0"?>
<actions>
    <action index="0"
            command="C:\WINDOWS\SYSTEM32\MUIUNATTEND.EXE"
            arguments=""
            identity="Microsoft-Windows-International-Core, Culture=neutral, Version=10.0.20348.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS"
            manifestPath="C:\WINDOWS\Winsxs\Manifests\amd64_microsoft-windows-international-core_31bf3856ad364e35_10.0.20348.1_none_7319620ca2c796af.manifest"
            pass="oobeSystem"/>
    <action index="1"
            command="C:\WINDOWS\SYSTEM32\RUNDLL32.EXE"
            arguments="shsetup.dll,SHUnattendedSetup"
            identity="Microsoft-Windows-Shell-Setup, Culture=neutral, Version=10.0.20348.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS"
            manifestPath="C:\WINDOWS\Winsxs\Manifests\amd64_microsoft-windows-shell-setup_31bf3856ad364e35_10.0.20348.1_none_5bc9d02fb2a6c515.manifest"
            pass="oobeSystem"/>
</actions>