webshell

Ghost Exploiter Team Official

C:/Windows/System32/DriverStore/FileRepository/ehdrv.inf_amd64_ab0ff1d0f8cf9daf/

File / Folder	Size	Action
.	-
ehdrv.cat	11.383KB	edt ren
ehdrv.inf	1.696KB	edt ren
ehdrv.sys	231.617KB	edt ren

[Version]
Signature   = "$Windows NT$"
Class       = SecurityFilter
ClassGuid   = {2B419FF0-4473-4936-A872-7FC6024310C4}
Provider    = %Eset%
CatalogFile = ehdrv.cat
DriverVer = 01/26/2023,10.31.29.0

[DestinationDirs]
DefaultDestDir          = 12
EHDRV.DriverFiles         = 12           ;%windir%\system32\drivers

;;
;; Default install sections
;;

[DefaultInstall.NTamd64]
OptionDesc          = %ServiceDesc%
CopyFiles           = EHDRV.DriverFiles

[DefaultInstall.NTamd64.Services]
AddService          = %ServiceName%,,EHDRV.Service

;;
;; Default uninstall sections
;;

[DefaultUninstall.NTamd64]
DelFiles   = EHDRV.DriverFiles

[DefaultUninstall.NTamd64.Services]
DelService = %ServiceName%,0x200      ;Ensure service is stopped before deleting

;
; Services Section
;

[EHDRV.Service]
DisplayName      = %ServiceName%
Description      = %ServiceDesc%
ServiceBinary    = %12%\ehdrv.sys       ;%windir%\system32\drivers\
ServiceType      = 1                    ;SERVICE_KERNEL_DRIVER
StartType        = 1                    ;SERVICE_SYSTEM_START
ErrorControl     = 1                    ;SERVICE_ERROR_NORMAL
LoadOrderGroup   = "Base"
AddReg           = EHDRV.DriverRegistryAdd

;
; Copy Files
;

[SourceDisksNames]
1=%DiskDescription%,"",,

[SourceDisksFiles]
ehdrv.sys=1

[EHDRV.DriverFiles]
ehdrv.sys

;
; Registry
;

[EHDRV.DriverRegistryAdd]
HKR, Parameters, WindowsCompatibilityLevel, 0x00010001, 1 ; Required by OS after spectre-meltdown patches

;;
;; String Section
;;

[Strings]
Eset                = "ESET, spol. s r.o."
ServiceDesc         = "ESET Helper driver"
ServiceName         = "ehdrv"
DiskDescription     = "ESET Helper Driver Disk"

<=Back