Mr.Combet Webshell 🔥

Mr.Combet Webshell

Your IP : 216.73.216.136

Server IP : 103.233.58.157

Server : Windows NT WIN-4PGF72KEHKB 10.0 build 17763 (Windows Server 2016) AMD64

Server Software : Microsoft-IIS/10.0

PHP Version : 7.3.25

Add File : Submit

Add Directory : Submit

Dir : C:/Windows/System32/migwiz/replacementmanifests/

View File Name : WMI-Core-Replacement.man

<?xml version='1.0' encoding='utf-8' standalone='yes'?>
<assembly
    xmlns="urn:schemas-microsoft-com:asm.v3"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    manifestVersion="1.0"
    >
  <assemblyIdentity
      language="neutral"
      name="Microsoft-Windows-WMI-Core"
      processorArchitecture="*"
      publicKeyToken="$(Build.WindowsPublicKeyToken)"
      version="0.0.0.0"
      versionScope="nonSxS"
      />
  <migration 
      replacementSettingsVersionRange="0"
      settingsVersion="1"
      >
    <migXml xmlns="">
      <plugin
          classId="{401F8281-A9B6-49F9-9F71-8AEA167EEEFD}"
          file="%windir%\system32\migration\WMIMigrationPlugin.dll"
          offlineApply="yes"
          />
      <rules context="system">
        <include>
          <objectSet>
            <pattern type="File">%windir%\system32\wbem\* [*]</pattern>
            <pattern type="File">%windir%\sysWow64\wbem\* [*]</pattern>
            <pattern type="Registry">HKLM\Software\Microsoft\WBEM\CIMOM [Autorecover MOFs]</pattern>
            <pattern type="Registry">HKLM\Software\Microsoft\WBEM\CIMOM\SecuredHostProviders [*]</pattern>
            <pattern type="Registry">HKLM\Software\Microsoft\WBEM\CIMOM\CompatibleHostProviders [*]</pattern>
            <pattern type="Registry">HKLM\Software\Microsoft\WBEM\CIMOM [DefaultSecuredHost]</pattern>
            <pattern type="Registry">HKLM\Software\Microsoft\WBEM\CIMOM [AutoRestoreEnabled]</pattern>
            <pattern type="Registry">HKLM\Software\Wow6432Node\Microsoft\WBEM\CIMOM\SecuredHostProviders [*]</pattern>
            <pattern type="Registry">HKLM\Software\Wow6432Node\Microsoft\WBEM\CIMOM\CompatibleHostProviders [*]</pattern>
            <pattern type="Registry">HKLM\Software\Wow6432Node\Microsoft\WBEM\CIMOM [DefaultSecuredHost]</pattern>
          </objectSet>
        </include>
        <exclude>
          <objectSet>
            <pattern type="File">%windir%\system32\wbem\AutoRecover\* [*]</pattern>
            <pattern type="File">%windir%\system32\wbem\logs [*]</pattern>
            <pattern type="File">%windir%\system32\wbem\Repository [*]</pattern>
            <pattern type="File">%windir%\system32\wbem\xml [*]</pattern>
            <pattern type="File">%windir%\sysWow64\wbem\AutoRecover\* [*]</pattern>
            <pattern type="File">%windir%\sysWow64\wbem\logs [*]</pattern>
            <pattern type="File">%windir%\sysWow64\wbem\Repository [*]</pattern>
            <pattern type="File">%windir%\sysWow64\wbem\xml [*]</pattern>
          </objectSet>
        </exclude>
      </rules>
    </migXml>
  </migration>
</assembly>