2018-04-18 14:59:53 +00:00
|
|
|
## Slmgr.vbs
|
|
|
|
|
|
|
|
|
|
* Functions: Execute
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
slmgr.vbs
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Acknowledgements:
|
|
|
|
|
* Matt Nelson - @enigma0x3
|
|
|
|
|
* Casey Smith - @subtee
|
|
|
|
|
|
|
|
|
|
Code sample:
|
2018-04-18 15:02:39 +00:00
|
|
|
* [Slmgr.reg](Payload/Slmgr.reg)
|
|
|
|
|
* [Slmgr_calc.sct](Payload/Slmgr_calc.sct)
|
2018-04-18 14:59:53 +00:00
|
|
|
|
|
|
|
|
Resources:
|
|
|
|
|
* https://www.slideshare.net/enigma0x3/windows-operating-system-archaeology
|
|
|
|
|
* https://www.youtube.com/watch?v=3gz1QmiMhss
|
|
|
|
|
|
|
|
|
|
Full path:
|
|
|
|
|
```
|
|
|
|
|
c:\windows\system32\slmgr.vbs
|
|
|
|
|
c:\windows\sysWOW64\slmgr.vbs
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Notes:
|
2018-04-18 15:02:39 +00:00
|
|
|
Requires that registry keys are imported and SCT present to work. SCT path can be adjusted inside the registry keys.
|
2018-04-18 14:59:53 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
