KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/System32/appraiser/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/System32/appraiser/restore.sdb
sdbfxzx&8Wp8`�IFPUKCAB�KCABKCOM�x8Wp8`�x,8Yp8`@�COM.KCOM�LOHECALP�x>8Yp8`�0*z*�*4*�x&8Xp8`�PAPUKCABdCAB KCOM	x�8Xp8`��*�	*H
*R*�*R*�*X
*�
*|TESPIHC*ECROFEG*�p|P��S��"``!@�DDU@pWp�`�`�`����-l{��I��4l�|�u��FS���G��;���[p `	`�PP������p`[p`NJ@WsWs[p`�J@WsWs[p`�
P������[p`^pa@_p`N`�a@]p`�Wp`�`�`*�<!V���L��y����� ��%�U�H�[�|EE�qEÀ���@�s����'[p`	`*`DP������p`
P������	[p`@��[p`Z`�^pa@_p`�_p`�`�_p`�a@ ]p`�Yp�``�`*�f��kVI��2<�٠�� ��%�U�H�[�|EE���RmE�L�E�� ��)`*`HP��p`)`*`HP��[p`@��a@�]p`j`�Yp�`�`�`��4�i�;��K�zq\�,p��FS���G��;�������P�!H��5h�aN�)`�*`HPP����p&`)`�*`HPP����[p`�@Ͱc^pa@@^pa@_p`j`�]p`j`Yp```4`��v�����M��cG{���Tgړ�uII�)���U�)`p`)`_p`�_p`j_p`�7p�^pa@^pa@�^pa@^pa@@^pa@^pa@^pa@^pa@ ^pa@^pa@^pa@ ]p`�Yp�```�`��
�8���?@�¬{o�����M]v:L�.�8K��)`p`)`2p`00`�Q@R@^pa@@]p`�Yp�```�`��GNÚ<I�*�����gV����2G���`s�N)`p`)`2p`
0`�Q@R@^pa@�]p`�Yp�```�`��S�w�;L�O�;Dr�) ]�A#;@��-��?�)`p`)`2p`0`|Q@1`�^pa@]p`�Xp�`�`�`�� l�i�$@���������FS���G��;��������v	B��� Q6P=F`�D`	H`	[p`"	^pa@�_p`j]p`�Xp�`<	`�`*�ϞNN=)�D�Ѷͱ���� ��%�U�H�[�|EE�d]��@iL��F��B`r	F`�	D`�	H`	2p`�	0`
Q@1`,
[p`Z`�^pa@a@$]p`�Xpz```4
`�
�����D�LZ�Hz�a�.�0�HiK��^ސ{w_p`N`�
8p`�
`a@@]p`�Xp```4`����x�?I�2��$�Tgړ�uII�)���U�_p`�_p`j_p`�7p�^pa@^pa@�^pa@^pa@@^pa@^pa@^pa@^pa@ ^pa@^pa@^pa@ ]p`�Xpz```�`����ٌ�D�;h���u���M]v:L�.�8K��2p`00`�Q@R@^pa@@]p`�Xpz```�`���
]�fG�:�&R���gV����2G���`s�N2p`
0`�Q@R@^pa@�]p`�Xpz```�`������@O�^���xڒ�) ]�A#;@��-��?�2p`0`|Q@1`�^pa@]p`�Xp�```�`2
��X����D�<��P*3O�c�K(�PI��/�B`\
_p`N`�
8p`�
`�
a@@]p`�Xp�```
`D��4t�8B�
l�m4�[��=��T��B��[���2p`X0`�Q@1`�^pa@_p`N`�]p`�Xp�```�`0���<��AI��?�&ɳb���s4B�B�7�X�ȡk2p`X0`�Q@1`@^pa@_p`N`@]p`�Xp�```T`�����i���O���4C��1�
`ܖ5L�S�4}E)2p`X0`�Q@1`�^pa@_p`N`�]p`�Xpz`�`�`4
`�
��`���oA��	y��m�.�0�HiK��^ސ{w_p`N`�8p`�
`�a@@]p`�Xpz`F`F```������G4L�w����F��Z�
g��B�K�X_��_p`N`�8p`�
`a@@]p`�xT�3.0.0.17�^Microsoft Windows Application Restore Database�4BackupFilePlaceHolder.exe�&RestorePlaceHolder�PlaceHolder�*�8%windir%\system32\ntdll.dll�FRelativePath\PlaceholderBinary.dll�,PlaceholderBinary.dll�6OtherPlaceholderBinary.dll�@YetAnotherPlaceholderBinary.dll�0IntermediateMatchAction�Sample CmdLine�NoRestore�&MockBackupFile.exe�6000 Test Entries - Restore�Microsoft�Contoso�0%windir%\system32\*.dll�TestFile� AddPlaceholder*�FWLINK:*�(SpecialStorePackage�.Mock.MockBackupPackage�8wekyb3d8bbwe�*AddPlaceholderCustom�foobar�4Placeholder.BackupPackage� FWLINK:12345678� FWLINK:87654321�NBackupLabel promotion to RestoreAction�Miscellaneous�AddPlaceholder�\BackupLabel promotion to RestoreAction - HVCI�TSystem\CurrentControlSet\Control\CI\State�HVCIEnabled�\BackupLabel promotion to RestoreAction - KCET��System\CurrentControlSet\Control\DeviceGuard\Scenarios\KernelShadowStacks�Enabled�\BackupLabel promotion to RestoreAction - KDRV�ZSOFTWARE\Microsoft\Windows NT\CurrentVersion�BuildLabEx�*arm64*�:BackupApplicationPlaceHolder�1.0.0.0�1.*�
1033�ntdll.dll�0Mock Backup Application�,Microsoft Corporation�1.0�2.*�PSOFTWARE\Microsoft\Cryptography\DRM_RNG�Default��LAMD Hardware Dependent Apps - Restore�:Advanced Micro Devices, Inc.�AmdDisplay�2PowerShellMatchingPlugin��write-host "Final result: $([math]::min((Get-PnpDevice -Class `"display`" | where-object { $_.InstanceId.ToLower().Contains(`"pci\ven_1002`") -or $_.InstanceId.ToLower().Contains(`"pci\ven_1022`") } | Measure).Count, 1))"�PIntel Hardware Dependent Apps - Restore�$Intel Corporation�&Intel* Corporation�IntelChipset�\write-host "Final result: $([math]::min((Get-PnpDevice -Class `"processor`" | where-object { $_.InstanceId.ToLower().Contains(`"acpi\genuineintel`") } | Measure).Count, 1))"�4Lenovo OEM Apps - Restore�Lenovo�BHARDWARE\DESCRIPTION\System\BIOS�&SystemManufacturer�*Lenovo*�Lenovo*�0Sony OEM Apps - Restore�
Sony�*Sony*�0VAIO OEM Apps - Restore�
VAIO�*Vaio*�*Chipset*�AmdChipset�\write-host "Final result: $([math]::min((Get-PnpDevice -Class `"processor`" | where-object { $_.InstanceId.ToLower().Contains(`"acpi\authenticamd`") } | Measure).Count, 1))"�*GeForce*�RNVIDIA Hardware Dependent Apps - Restore�&NVIDIA Corporation�NvidiaDisplay�Nwrite-host "Final result: $([math]::min((Get-PnpDevice -Class `"display`" | where-object { $_.InstanceId.ToLower().Contains(`"pci\ven_10de`") } | Measure).Count, 1))"

Anon7 - 2021