webshell

Ghost Exploiter Team Official

C:/Windows/System32/DriverStore/FileRepository/hidbth.inf_amd64_66913d2006fdafb0/

File / Folder	Size	Action
.	-
hidbth.inf	4.061KB	edt ren
hidbth.sys	140KB	edt ren

��;� �M�i�c�r�o�s�o�f�t� �W�i�n�d�o�w�s� �B�l�u�e�t�o�o�t�h� �H�I�D� �I�n�f�
�
�;� �C�o�p�y�r�i�g�h�t� �(�c�)� �2�0�0�2� �M�i�c�r�o�s�o�f�t� �C�o�r�p�o�r�a�t�i�o�n�
�
�
�
�
�
�[�V�e�r�s�i�o�n�]�
�
�S�i�g�n�a�t�u�r�e�=�"�$�W�I�N�D�O�W�S� �N�T�$�"�
�
�C�l�a�s�s�=�H�I�D�C�l�a�s�s�
�
�C�l�a�s�s�G�u�i�d�=�{�7�4�5�a�1�7�a�0�-�7�4�d�3�-�1�1�d�0�-�b�6�f�e�-�0�0�a�0�c�9�0�f�5�7�d�a�}�
�
�P�r�o�v�i�d�e�r�=�%�M�S�F�T�%�
�
�D�r�i�v�e�r�V�e�r� �=� �0�6�/�2�1�/�2�0�0�6�,�1�0�.�0�.�2�0�3�4�8�.�2�8�4�9�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�N�a�m�e�s�]�
�
�3�4�2�6�=�w�i�n�d�o�w�s� �c�d�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�F�i�l�e�s�]�
�
�h�i�d�b�t�h�.�s�y�s� �=� �3�4�2�6�
�
�
�
�[�C�o�n�t�r�o�l�F�l�a�g�s�]�
�
�E�x�c�l�u�d�e�F�r�o�m�S�e�l�e�c�t� �=� �*�
�
�
�
�[�D�e�s�t�i�n�a�t�i�o�n�D�i�r�s�]�
�
�D�e�f�a�u�l�t�D�e�s�t�D�i�r� �=� �1�2�
�
�
�
�[�M�a�n�u�f�a�c�t�u�r�e�r�]�
�
�;� �H�I�D�
�
�;�
�
�%�M�S�F�T�%�=�M�i�c�r�o�s�o�f�t�H�i�d�,�N�T�a�m�d�6�4�.�.�.�1�
�
�
�
�;�
�
�;� � �H�I�D�
�
�;�
�
�[�M�i�c�r�o�s�o�f�t�H�i�d�.�N�T�a�m�d�6�4�.�.�.�1�]�
�
�%�B�T�H�E�N�U�M�\�{�0�0�0�0�1�1�2�4�-�0�0�0�0�-�1�0�0�0�-�8�0�0�0�-�0�0�8�0�5�f�9�b�3�4�f�b�}�.�D�e�v�i�c�e�D�e�s�c�%�=�H�I�D�B�T�H�_�I�n�s�t�,�,�B�T�H�E�N�U�M�\�{�0�0�0�0�1�1�2�4�-�0�0�0�0�-�1�0�0�0�-�8�0�0�0�-�0�0�8�0�5�f�9�b�3�4�f�b�}�
�
�
�
�[�H�I�D�B�T�H�_�I�n�s�t�.�N�T�]�
�
�I�n�c�l�u�d�e�=�i�n�p�u�t�.�i�n�f�
�
�N�e�e�d�s�=�H�I�D�_�I�n�s�t�.�N�T�
�
�C�o�p�y�f�i�l�e�s� �=� �H�I�D�B�T�H�_�I�n�s�t�.�C�o�p�y�F�i�l�e�s�.�N�T�
�
�
�
�[�H�I�D�B�T�H�_�I�n�s�t�.�C�o�p�y�F�i�l�e�s�.�N�T�]�
�
�h�i�d�b�t�h�.�s�y�s�,�,�,�0�x�1�0�0�
�
�
�
�[�H�I�D�B�T�H�_�I�n�s�t�.�N�T�.�H�W�]�
�
�A�d�d�R�e�g� �=� �H�I�D�B�T�H�_�I�n�s�t�.�A�d�d�R�e�g�.�N�T�.�H�W�
�
�
�
�[�H�I�D�B�T�H�_�I�n�s�t�.�A�d�d�R�e�g�.�N�T�.�H�W�]�
�
�H�K�R�,�,�"�R�e�t�a�i�n�W�W�I�r�p�W�h�e�n�D�e�v�i�c�e�A�b�s�e�n�t�"�,�0�x�0�0�0�1�0�0�0�1�,�0�x�1�
�
�H�K�R�,�,�"�L�e�g�a�c�y�T�o�u�c�h�S�c�a�l�i�n�g�"�,�0�x�0�0�0�1�0�0�0�1�,�0�x�0�
�
�
�
�[�H�I�D�B�T�H�_�I�n�s�t�.�N�T�.�S�e�r�v�i�c�e�s�]�
�
�A�d�d�S�e�r�v�i�c�e� �=� �H�i�d�B�t�h�,�%�S�P�S�V�C�I�N�S�T�_�A�S�S�O�C�S�E�R�V�I�C�E�%�,�H�I�D�B�T�H�_�S�e�r�v�i�c�e�_�I�n�s�t�,� �H�I�D�B�T�H�_�E�v�e�n�t�L�o�g�_�I�n�s�t�
�
�
�
�[�H�I�D�B�T�H�_�S�e�r�v�i�c�e�_�I�n�s�t�]�
�
�D�i�s�p�l�a�y�N�a�m�e� � � � �=� �%�H�I�D�B�T�H�.�S�v�c�D�e�s�c�%�
�
�S�e�r�v�i�c�e�T�y�p�e� � � � �=� �%�S�E�R�V�I�C�E�_�K�E�R�N�E�L�_�D�R�I�V�E�R�%�
�
�S�t�a�r�t�T�y�p�e� � � � � � �=� �%�S�E�R�V�I�C�E�_�D�E�M�A�N�D�_�S�T�A�R�T�%�
�
�E�r�r�o�r�C�o�n�t�r�o�l� � � �=� �%�S�E�R�V�I�C�E�_�E�R�R�O�R�_�I�G�N�O�R�E�%�
�
�S�e�r�v�i�c�e�B�i�n�a�r�y� � �=� �%�1�2�%�\�h�i�d�b�t�h�.�s�y�s�
�
�L�o�a�d�O�r�d�e�r�G�r�o�u�p� �=� �e�x�t�e�n�d�e�d� �b�a�s�e�
�
�
�
�[�H�I�D�B�T�H�_�E�v�e�n�t�L�o�g�_�I�n�s�t�]�
�
�A�d�d�R�e�g�=�H�I�D�B�T�H�_�E�v�e�n�t�L�o�g�_�I�n�s�t�.�A�d�d�R�e�g�
�
�
�
�[�H�I�D�B�T�H�_�E�v�e�n�t�L�o�g�_�I�n�s�t�.�A�d�d�R�e�g�]�
�
�H�K�R�,�,�E�v�e�n�t�M�e�s�s�a�g�e�F�i�l�e�,�0�x�0�0�0�2�0�0�0�0�,�"�%�%�S�y�s�t�e�m�R�o�o�t�%�%�\�S�y�s�t�e�m�3�2�\�I�o�L�o�g�M�s�g�.�d�l�l�;�%�%�S�y�s�t�e�m�R�o�o�t�%�%�\�S�y�s�t�e�m�3�2�\�D�r�i�v�e�r�s�\�h�i�d�b�t�h�.�s�y�s�"�
�
�H�K�R�,�,�T�y�p�e�s�S�u�p�p�o�r�t�e�d�,�0�x�0�0�0�1�0�0�0�1�,�7�
�
�
�
�[�s�t�r�i�n�g�s�]�
�
�;�
�
�;� �N�o�n�-�l�o�c�a�l�i�z�a�b�l�e�
�
�;�
�
�S�P�S�V�C�I�N�S�T�_�A�S�S�O�C�S�E�R�V�I�C�E�=� �0�x�0�0�0�0�0�0�0�2�
�
�S�E�R�V�I�C�E�_�K�E�R�N�E�L�_�D�R�I�V�E�R� �=� �1�
�
�S�E�R�V�I�C�E�_�B�O�O�T�_�S�T�A�R�T� � � � �=� �0�
�
�S�E�R�V�I�C�E�_�S�Y�S�T�E�M�_�S�T�A�R�T� � �=� �1�
�
�S�E�R�V�I�C�E�_�A�U�T�O�_�S�T�A�R�T� � � � �=� �2�
�
�S�E�R�V�I�C�E�_�D�E�M�A�N�D�_�S�T�A�R�T� � �=� �3�
�
�S�E�R�V�I�C�E�_�E�R�R�O�R�_�N�O�R�M�A�L� � �=� �1�
�
�S�E�R�V�I�C�E�_�E�R�R�O�R�_�I�G�N�O�R�E� � �=� �0�
�
�
�
�;�
�
�;� �L�o�c�a�l�i�z�a�b�l�e�
�
�;�
�
�B�T�H�.�D�i�s�k�N�a�m�e� � � � � � � � � � �=� �"�B�l�u�e�t�o�o�t�h�"�
�
�M�S�F�T� � � � � � � � � � � � � � � � � � �=� �"�M�i�c�r�o�s�o�f�t�"�
�
�H�I�D�B�T�H�.�S�v�c�D�e�s�c� � � � � � � � �=� �"�M�i�c�r�o�s�o�f�t� �B�l�u�e�t�o�o�t�h� �H�I�D� �M�i�n�i�p�o�r�t�"�
�
�B�T�H�E�N�U�M�\�{�0�0�0�0�1�1�2�4�-�0�0�0�0�-�1�0�0�0�-�8�0�0�0�-�0�0�8�0�5�f�9�b�3�4�f�b�}�.�D�e�v�i�c�e�D�e�s�c�=� �"�B�l�u�e�t�o�o�t�h� �H�I�D� �D�e�v�i�c�e�"�
�
�

<=Back