Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0
Server: Microsoft-IIS/10.0
User: buyyou
Directory: C:\Windows\SysWOW64\wbem\
Name Size Type Actions
AutoRecover-DirectoryRename Delete
en-US-DirectoryRename Delete
Logs-DirectoryRename Delete
Repository-DirectoryRename Delete
tmf-DirectoryRename Delete
xml-DirectoryRename Delete
zh-CN-DirectoryRename Delete
zh-HANS-DirectoryRename Delete
AgentWmi.mof17510 bytes.mofEdit Rename Delete
AgentWmiUninstall.mof693 bytes.mofEdit Rename Delete
BthMtpEnum.mof2626 bytes.mofEdit Rename Delete
CIWmi.mof2088 bytes.mofEdit Rename Delete
cli.mof32626 bytes.mofEdit Rename Delete
cliegaliases.mof2815350 bytes.mofEdit Rename Delete
dimsjob.mof1239 bytes.mofEdit Rename Delete
dimsroam.mof1284 bytes.mofEdit Rename Delete
DscCoreConfProv.mof6680 bytes.mofEdit Rename Delete
eaimeapi.mof1300 bytes.mofEdit Rename Delete
esscli.dll384512 bytes.dllEdit Rename Delete
fastprox.dll832000 bytes.dllEdit Rename Delete
fdSSDP.mof656 bytes.mofEdit Rename Delete
fdWNet.mof716 bytes.mofEdit Rename Delete
fdWSD.mof656 bytes.mofEdit Rename Delete
FolderRedirectionWMIProvider.mof9000 bytes.mofEdit Rename Delete
FunDisc.mof702 bytes.mofEdit Rename Delete
hbaapi.mof482504 bytes.mofEdit Rename Delete
IMAPIv2-Base.mof32115 bytes.mofEdit Rename Delete
IMAPIv2-FileSystemSupport.mof2074 bytes.mofEdit Rename Delete
IMAPIv2-LegacyShim.mof759 bytes.mofEdit Rename Delete
IpmiDTrc.mof638 bytes.mofEdit Rename Delete
ipmiprr.dll3584 bytes.dllEdit Rename Delete
ipmiprv.dll165888 bytes.dllEdit Rename Delete
ipmiprv.mof212796 bytes.mofEdit Rename Delete
IpmiPTrc.mof763 bytes.mofEdit Rename Delete
ipsecsvc.mof1278 bytes.mofEdit Rename Delete
iscsidsc.mof19872 bytes.mofEdit Rename Delete
iscsihba.mof114000 bytes.mofEdit Rename Delete
iscsiprf.mof46042 bytes.mofEdit Rename Delete
iscsirem.mof4503 bytes.mofEdit Rename Delete
iscsiwmiv2.mof37162 bytes.mofEdit Rename Delete
iscsiwmiv2_uninstall.mof2780 bytes.mofEdit Rename Delete
kerberos.mof8758 bytes.mofEdit Rename Delete
L2SecHC.mof2334 bytes.mofEdit Rename Delete
lsasrv.mof13780 bytes.mofEdit Rename Delete
Microsoft.AppV.AppVClientWmi.dll31568 bytes.dllEdit Rename Delete
Microsoft.AppV.AppVClientWmi.mof11694 bytes.mofEdit Rename Delete
Microsoft.Uev.AgentWmi.dll1127936 bytes.dllEdit Rename Delete
Microsoft.Uev.ManagedAgentWmi.mof3129 bytes.mofEdit Rename Delete
Microsoft.Uev.ManagedAgentWmiUninstall.mof514 bytes.mofEdit Rename Delete
mispace.mof1097314 bytes.mofEdit Rename Delete
mispace_uninstall.mof9342 bytes.mofEdit Rename Delete
mmc.mof698 bytes.mofEdit Rename Delete
mofcomp.exe27648 bytes.exeEdit Rename Delete
mofd.dll203776 bytes.dllEdit Rename Delete
msdtcwmi.dll177152 bytes.dllEdit Rename Delete
MsDtcWmi.mof21526 bytes.mofEdit Rename Delete
msfeeds.mof1518 bytes.mofEdit Rename Delete
msfeedsbs.mof1574 bytes.mofEdit Rename Delete
msiscsi.mof4803 bytes.mofEdit Rename Delete
mstsc.mof1199 bytes.mofEdit Rename Delete
mstscax.mof2055 bytes.mofEdit Rename Delete
msv1_0.mof7721 bytes.mofEdit Rename Delete
mswmdm.mof1710 bytes.mofEdit Rename Delete
ncsi.mof1130 bytes.mofEdit Rename Delete
netprofm.mof1117 bytes.mofEdit Rename Delete
networkitemfactory.mof683 bytes.mofEdit Rename Delete
newdev.mof3681 bytes.mofEdit Rename Delete
nlasvc.mof3825 bytes.mofEdit Rename Delete
nlsvc.mof2873 bytes.mofEdit Rename Delete
npivwmi.mof32260 bytes.mofEdit Rename Delete
nshipsec.mof1266 bytes.mofEdit Rename Delete
OfflineFilesConfigurationWmiProvider.mof5562 bytes.mofEdit Rename Delete
OfflineFilesConfigurationWmiProvider_Uninstall.mof800 bytes.mofEdit Rename Delete
OfflineFilesWmiProvider.mof14588 bytes.mofEdit Rename Delete
OfflineFilesWmiProvider_Uninstall.mof2162 bytes.mofEdit Rename Delete
PolicMan.dll88064 bytes.dllEdit Rename Delete
PolicMan.mof12150 bytes.mofEdit Rename Delete
polstore.mof1275 bytes.mofEdit Rename Delete
portabledeviceapi.mof4304 bytes.mofEdit Rename Delete
portabledeviceclassextension.mof3202 bytes.mofEdit Rename Delete
portabledeviceconnectapi.mof1777 bytes.mofEdit Rename Delete
portabledevicetypes.mof3490 bytes.mofEdit Rename Delete
portabledevicewiacompat.mof1760 bytes.mofEdit Rename Delete
ppcRsopCompSchema.mof1994 bytes.mofEdit Rename Delete
ppcRsopUserSchema.mof1990 bytes.mofEdit Rename Delete
PrintManagementProvider.dll172544 bytes.dllEdit Rename Delete
PrintManagementProvider.mof33214 bytes.mofEdit Rename Delete
PS_MMAgent.mof3010 bytes.mofEdit Rename Delete
qmgr.mof2302 bytes.mofEdit Rename Delete
RacWmiProv.dll56832 bytes.dllEdit Rename Delete
RacWmiProv.mof3032 bytes.mofEdit Rename Delete
rawxml.xsl623 bytes.xslEdit Rename Delete
rdpendp.mof1122 bytes.mofEdit Rename Delete
rdpinit.mof1197 bytes.mofEdit Rename Delete
rdpshell.mof1200 bytes.mofEdit Rename Delete
regevent.mof111698 bytes.mofEdit Rename Delete
Remove.Microsoft.AppV.AppvClientWmi.mof830 bytes.mofEdit Rename Delete
samsrv.mof62541 bytes.mofEdit Rename Delete
scersop.mof8310 bytes.mofEdit Rename Delete
schannel.mof1075 bytes.mofEdit Rename Delete
schedprov.dll188416 bytes.dllEdit Rename Delete
SchedProv.mof51078 bytes.mofEdit Rename Delete
setupapi.mof3689 bytes.mofEdit Rename Delete
stdprov.dll117248 bytes.dllEdit Rename Delete
storagewmi.mof339126 bytes.mofEdit Rename Delete
storagewmi_passthru.mof1898 bytes.mofEdit Rename Delete
storagewmi_passthru_uninstall.mof1651 bytes.mofEdit Rename Delete
storagewmi_uninstall.mof13476 bytes.mofEdit Rename Delete
tcpip.mof3892 bytes.mofEdit Rename Delete
texttable.xsl6278 bytes.xslEdit Rename Delete
textvaluelist.xsl2766 bytes.xslEdit Rename Delete
tsallow.mof17067 bytes.mofEdit Rename Delete
tsmf.mof1236 bytes.mofEdit Rename Delete
tspkg.mof1063 bytes.mofEdit Rename Delete
UserStateWMIProvider.mof3258 bytes.mofEdit Rename Delete
vds.mof61056 bytes.mofEdit Rename Delete
vdswmi.dll177664 bytes.dllEdit Rename Delete
viewprov.dll142336 bytes.dllEdit Rename Delete
vss.mof60468 bytes.mofEdit Rename Delete
vsswmi.dll118784 bytes.dllEdit Rename Delete
wbemcntl.dll306688 bytes.dllEdit Rename Delete
wbemdisp.dll252416 bytes.dllEdit Rename Delete
wbemdisp.tlb59904 bytes.tlbEdit Rename Delete
wbemprox.dll38400 bytes.dllEdit Rename Delete
wbemsvc.dll49152 bytes.dllEdit Rename Delete
WdacWmiProv.dll113152 bytes.dllEdit Rename Delete
wdigest.mof1103 bytes.mofEdit Rename Delete
whqlprov.mof3974 bytes.mofEdit Rename Delete
Win32_Tpm.dll49664 bytes.dllEdit Rename Delete
wininit.mof1756 bytes.mofEdit Rename Delete
winipsec.mof1270 bytes.mofEdit Rename Delete
WinMgmt.exe79872 bytes.exeEdit Rename Delete
Winsat.mof1545 bytes.mofEdit Rename Delete
WinsatUninstall.mof487 bytes.mofEdit Rename Delete
WMIADAP.exe129536 bytes.exeEdit Rename Delete
WmiApRpl.dll95744 bytes.dllEdit Rename Delete
WMIC.exe404992 bytes.exeEdit Rename Delete
WMICOOKR.dll78336 bytes.dllEdit Rename Delete
WmiDcPrv.dll145920 bytes.dllEdit Rename Delete
WmiPerfClass.dll78848 bytes.dllEdit Rename Delete
WmiPerfClass.mof980 bytes.mofEdit Rename Delete
WmiPerfInst.dll40960 bytes.dllEdit Rename Delete
WmiPerfInst.mof804 bytes.mofEdit Rename Delete
WmiPrvSE.exe411648 bytes.exeEdit Rename Delete
wmiutils.dll108544 bytes.dllEdit Rename Delete
wmp.mof4887 bytes.mofEdit Rename Delete
wpdbusenum.mof2804 bytes.mofEdit Rename Delete
wpdcomp.mof2818 bytes.mofEdit Rename Delete
wpdfs.mof2749 bytes.mofEdit Rename Delete
wpdmtp.mof3344 bytes.mofEdit Rename Delete
wpdshext.mof3319 bytes.mofEdit Rename Delete
WPDShServiceObj.mof3063 bytes.mofEdit Rename Delete
wpdsp.mof2987 bytes.mofEdit Rename Delete
WsmAgent.mof822 bytes.mofEdit Rename Delete
WsmAgentUninstall.mof754 bytes.mofEdit Rename Delete
WsmAuto.mof4529 bytes.mofEdit Rename Delete
wsp_fs.mof563838 bytes.mofEdit Rename Delete
wsp_fs_uninstall.mof2774 bytes.mofEdit Rename Delete
wsp_health.mof570118 bytes.mofEdit Rename Delete
wsp_health_uninstall.mof2366 bytes.mofEdit Rename Delete
wsp_sr.mof608664 bytes.mofEdit Rename Delete
wsp_sr_uninstall.mof3456 bytes.mofEdit Rename Delete
xsl-mappings.xml2866 bytes.xmlEdit Rename Delete
xwizards.mof2201 bytes.mofEdit Rename Delete
© Akmal archtte id