Mr.Combet Webshell 🔥

Mr.Combet Webshell

Your IP : 216.73.216.136

Server IP : 103.233.58.157

Server : Windows NT WIN-4PGF72KEHKB 10.0 build 17763 (Windows Server 2016) AMD64

Server Software : Microsoft-IIS/10.0

PHP Version : 7.3.25

Add File : Submit

Add Directory : Submit

Edit File Name : VF_DataStore.ps1

# Copyright © 2017, Microsoft Corporation. All rights reserved.
# =============================================================
param($oldTimestamp)

# =============================================================
# Load Utilities
# =============================================================
. .\CL_Utility.ps1

# =============================================================

if((Check-WindowsVersion) -eq 61)
{
	$sdFolderDate = Get-Item $env:windir\SoftwareDistribution | Foreach {$_.LastWriteTime}
	[DateTime]$oldDate = [DateTime]$oldTimestamp

$detected = ($oldDate.ToString() -eq $sdFolderDate.ToString())

Remove-Item $Env:TEMP\DataStoreAndWULogFiles -recurse -force -ErrorAction SilentlyContinue
	Remove-Item $Env:TEMP\RS_DataStore_Verifier.txt -recurse -force -ErrorAction SilentlyContinue
}
else
{
	$sdFolderDate = Get-Item $env:windir\SoftwareDistribution | Foreach {$_.LastWriteTime}
	[DateTime]$oldDate = [DateTime]$oldTimestamp

$detected = ($oldDate.ToString() -eq $sdFolderDate.ToString())
}

Update-Diagrootcause -Id RC_DataStore -Detected $detected