I just realised that a recent update introduced a silly bug that would allow Shellter to accept an empty ‘CMD’ command string to execute when choosing the embedded WinExec payload.

Other than that, the payload works fine with the command that you submit, so you won’t have any issues with it.

Will be pushing out the fix in  the upcoming Shellter V [5.3].

Cheers,
kyREcon