webshell

Ghost Exploiter Team Official

C:/Windows/System32/DriverStore/FileRepository/mf.inf_amd64_216461b70ba71068/

File / Folder	Size	Action
.	-
mf.inf	2.332KB	edt ren
mf.sys	68KB	edt ren

��
�
�[�V�e�r�s�i�o�n�]�
�
�S�i�g�n�a�t�u�r�e�=�"�$�W�i�n�d�o�w�s� �N�T�$�"�
�
�P�r�o�v�i�d�e�r�=�%�M�S�%�
�
�C�l�a�s�s�=�M�u�l�t�i�F�u�n�c�t�i�o�n�
�
�C�l�a�s�s�G�U�I�D�=�{�4�d�3�6�e�9�7�1�-�e�3�2�5�-�1�1�c�e�-�b�f�c�1�-�0�8�0�0�2�b�e�1�0�3�1�8�}�
�
�P�n�p�L�o�c�k�d�o�w�n�=�1�
�
�D�r�i�v�e�r�V�e�r� �=� �0�6�/�2�1�/�2�0�0�6�,�1�0�.�0�.�2�0�3�4�8�.�1�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�N�a�m�e�s�]�
�
�3�4�2�6�=�w�i�n�d�o�w�s� �c�d�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�F�i�l�e�s�]�
�
�m�f�.�s�y�s� �	�	�=� �3�4�2�6�
�
�
�
�;�
�
�;� �T�a�b�l�e� �o�f� �C�o�n�t�e�n�t�s�
�
�;�
�
�[�M�a�n�u�f�a�c�t�u�r�e�r�]�
�
�%�M�F�%�=�M�F�,�N�T�a�m�d�6�4�
�
�
�
�[�M�F�.�N�T�a�m�d�6�4�]�
�
�%�M�F�C�A�R�D�%�=�M�F�I�N�S�T�A�L�L�.�m�f�,� �*�P�N�P�0�D�0�0�
�
�
�
�[�M�F�I�N�S�T�A�L�L�.�m�f�]�
�
�;�A�d�d�R�e�g�=�S�t�a�n�d�a�r�d�M�F�.�R�e�g�
�
�C�o�p�y�F�i�l�e�s�=�m�f�.�C�o�p�y�F�i�l�e�s�
�
�
�
�[�M�F�I�N�S�T�A�L�L�.�m�f�.�S�e�r�v�i�c�e�s�]�
�
�A�d�d�S�e�r�v�i�c�e� �=� �m�f�,� �2�,� �m�f�_�S�e�r�v�i�c�e�_�I�n�s�t�,� �m�f�_�E�v�e�n�t�L�o�g�_�I�n�s�t�
�
�
�
�[�m�f�_�S�e�r�v�i�c�e�_�I�n�s�t�]�
�
�S�e�r�v�i�c�e�T�y�p�e� � � � �=� �1� � � � � � �;� �S�E�R�V�I�C�E�_�K�E�R�N�E�L�_�D�R�I�V�E�R�
�
�S�t�a�r�t�T�y�p�e� � � � � � �=� �3� � � � � � �;� �S�E�R�V�I�C�E�_�D�E�M�A�N�D�_�S�T�A�R�T�
�
�E�r�r�o�r�C�o�n�t�r�o�l� � � �=� �1� � � � � � �;� �S�E�R�V�I�C�E�_�E�R�R�O�R�_�N�O�R�M�A�L�
�
�S�e�r�v�i�c�e�B�i�n�a�r�y� � �=� �%�1�2�%�\�m�f�.�s�y�s�
�
�
�
�[�m�f�_�E�v�e�n�t�L�o�g�_�I�n�s�t�]�
�
�A�d�d�R�e�g� �=� �m�f�_�E�v�e�n�t�L�o�g�_�A�d�d�R�e�g�
�
�
�
�[�m�f�_�E�v�e�n�t�L�o�g�_�A�d�d�R�e�g�]�
�
�;�R�E�G�_�E�X�P�A�N�D�_�S�Z� �=� �0�x�0�0�0�2�0�0�0�0�
�
�H�K�R�,�,�E�v�e�n�t�M�e�s�s�a�g�e�F�i�l�e�,�0�x�0�0�0�2�0�0�0�0�,�"�%�%�S�y�s�t�e�m�R�o�o�t�%�%�\�S�y�s�t�e�m�3�2�\�I�o�L�o�g�M�s�g�.�d�l�l�"�
�
�;�R�E�G�_�D�W�O�R�D�=�0�x�0�0�0�1�0�0�0�1�
�
�H�K�R�,�,�T�y�p�e�s�S�u�p�p�o�r�t�e�d�,�0�x�0�0�0�1�0�0�0�1�,�7�
�
�
�
�[�m�f�.�C�o�p�y�F�i�l�e�s�]�
�
�m�f�.�s�y�s�,�,�,�0�x�1�0�0�
�
�
�
�[�D�e�s�t�i�n�a�t�i�o�n�D�i�r�s�]�
�
�m�f�.�C�o�p�y�F�i�l�e�s� �=� �1�2� � � �;� �M�F�.�S�Y�S�
�
�
�
�[�S�t�r�i�n�g�s�]�
�
�;�L�o�c�a�l�i�z�a�b�l�e�
�
�M�S�=�"�M�i�c�r�o�s�o�f�t�"�
�
�;�
�
�;� �M�a�n�u�f�a�c�t�u�r�e�r� �n�a�m�e�s�
�
�;�
�
�M�F�=�"�G�e�n�e�r�i�c� �m�u�l�t�i�f�u�n�c�t�i�o�n� �c�a�r�d�"�
�
�;� �A�d�a�p�t�e�r� �n�a�m�e�s�
�
�;�
�
�M�F�C�A�R�D�=�"�G�e�n�e�r�i�c� �M�u�l�t�i�f�u�n�c�t�i�o�n� �P�C�-�C�a�r�d�"�
�
�