webshell

Ghost Exploiter Team Official

C:/Windows/System32/DriverStore/FileRepository/npsvctrig.inf_amd64_b70d80e0d7c2039e/

File / Folder	Size	Action
.	-
npsvctrig.inf	2.939KB	edt ren
npsvctrig.sys	60KB	edt ren

��[�V�e�r�s�i�o�n�]�
�
�S�i�g�n�a�t�u�r�e�=�"�$�W�I�N�D�O�W�S� �N�T�$�"�
�
�C�l�a�s�s�=�S�y�s�t�e�m�
�
�C�l�a�s�s�G�u�i�d�=�{�4�d�3�6�e�9�7�d�-�e�3�2�5�-�1�1�c�e�-�b�f�c�1�-�0�8�0�0�2�b�e�1�0�3�1�8�}�
�
�P�r�o�v�i�d�e�r�=�%�M�S�F�T�%�
�
�P�n�p�L�o�c�k�d�o�w�n�=�1�
�
�D�r�i�v�e�r�V�e�r� �=� �0�6�/�2�1�/�2�0�0�6�,�1�0�.�0�.�2�0�3�4�8�.�1�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�N�a�m�e�s�]�
�
�1�=�w�i�n�d�o�w�s� �c�d�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�F�i�l�e�s�]�
�
�n�p�s�v�c�t�r�i�g�.�s�y�s� �=� �1�
�
�
�
�[�D�e�s�t�i�n�a�t�i�o�n�D�i�r�s�]�
�
�D�e�f�a�u�l�t�D�e�s�t�D�i�r� �=� �1�2�
�
�
�
�[�C�o�n�t�r�o�l�F�l�a�g�s�]�
�
�E�x�c�l�u�d�e�F�r�o�m�S�e�l�e�c�t� �=� �*�
�
�
�
�[�M�a�n�u�f�a�c�t�u�r�e�r�]�
�
�%�M�S�F�T�%� �=� �M�i�c�r�o�s�o�f�t�,�N�T�a�m�d�6�4�
�
�
�
�[�M�i�c�r�o�s�o�f�t�.�N�T�a�m�d�6�4�]�
�
�%�N�P�S�V�C�T�R�I�G�.�D�e�v�i�c�e�D�e�s�c�%� �=� �N�P�S�V�C�T�R�I�G�_�I�n�s�t�
�
�
�
�[�N�P�S�V�C�T�R�I�G�_�I�n�s�t�.�N�T�]�
�
�C�o�p�y�f�i�l�e�s� �=� �N�P�S�V�C�T�R�I�G�_�C�o�p�y�F�i�l�e�s�
�
�
�
�[�N�P�S�V�C�T�R�I�G�_�C�o�p�y�F�i�l�e�s�]�
�
�n�p�s�v�c�t�r�i�g�.�s�y�s�,�,�,�0�x�1�0�0�
�
�
�
�[�N�P�S�V�C�T�R�I�G�_�I�n�s�t�.�N�T�.�S�e�r�v�i�c�e�s�]�
�
�A�d�d�S�e�r�v�i�c�e�=�n�p�s�v�c�t�r�i�g�,�2�,�N�P�S�V�C�T�R�I�G�_�S�e�r�v�i�c�e�_�I�n�s�t�
�
�
�
�[�N�P�S�V�C�T�R�I�G�_�S�e�r�v�i�c�e�_�I�n�s�t�]�
�
�D�i�s�p�l�a�y�N�a�m�e�	�=�	�%�N�P�S�V�C�T�R�I�G�.�S�v�c�D�i�s�p�l�a�y�N�a�m�e�%�
�
�S�e�r�v�i�c�e�T�y�p�e�	�=�	�%�S�E�R�V�I�C�E�_�K�E�R�N�E�L�_�D�R�I�V�E�R�%�
�
�S�t�a�r�t�T�y�p�e�	�=�	�%�S�E�R�V�I�C�E�_�S�Y�S�T�E�M�_�S�T�A�R�T�%�
�
�E�r�r�o�r�C�o�n�t�r�o�l�	�=�	�%�S�E�R�V�I�C�E�_�E�R�R�O�R�_�S�E�V�E�R�E�%�
�
�S�e�r�v�i�c�e�B�i�n�a�r�y�	�=�	�%�1�2�%�\�n�p�s�v�c�t�r�i�g�.�s�y�s�
�
�A�d�d�R�e�g�	�	�=�	�N�P�S�V�C�T�R�I�G�.�A�d�d�R�e�g�i�s�t�r�y�
�
�
�
�[�N�P�S�V�C�T�R�I�G�.�A�d�d�R�e�g�i�s�t�r�y�]�
�
�H�K�R�,�"�I�n�s�t�a�n�c�e�s�"�,�"�D�e�f�a�u�l�t�I�n�s�t�a�n�c�e�"�,�0�x�0�0�0�0�0�0�0�0�,�%�D�e�f�a�u�l�t�I�n�s�t�a�n�c�e�%�
�
�H�K�R�,�"�I�n�s�t�a�n�c�e�s�\�"�%�D�e�f�a�u�l�t�I�n�s�t�a�n�c�e�%�,�"�A�l�t�i�t�u�d�e�"�,�0�x�0�0�0�0�0�0�0�0�,�%�A�l�t�i�t�u�d�e�A�c�t�i�v�i�t�y�M�o�n�i�t�o�r�%�
�
�H�K�R�,�"�I�n�s�t�a�n�c�e�s�\�"�%�D�e�f�a�u�l�t�I�n�s�t�a�n�c�e�%�,�"�F�l�a�g�s�"�,�0�x�0�0�0�1�0�0�0�1�,�%�I�n�s�t�a�n�c�e�F�l�a�g�s�%�
�
�
�
�
�
�[�s�t�r�i�n�g�s�]�
�
�;� �l�o�c�a�l�i�z�a�b�l�e� �s�t�r�i�n�g�s�
�
�M�S�F�T� �=� �"�M�i�c�r�o�s�o�f�t�"�
�
�N�P�S�V�C�T�R�I�G�.�D�e�v�i�c�e�D�e�s�c� �=� �"�N�a�m�e�d� �p�i�p�e� �s�e�r�v�i�c�e� �t�r�i�g�g�e�r� �p�r�o�v�i�d�e�r�"�
�
�N�P�S�V�C�T�R�I�G�.�S�v�c�D�i�s�p�l�a�y�N�a�m�e� �=� �"�N�a�m�e�d� �p�i�p�e� �s�e�r�v�i�c�e� �t�r�i�g�g�e�r� �p�r�o�v�i�d�e�r�"�
�
�
�
�;� �n�o�n�-�l�o�c�a�l�i�z�a�b�l�e� �s�t�r�i�n�g�s�
�
�S�E�R�V�I�C�E�_�K�E�R�N�E�L�_�D�R�I�V�E�R�	�=�	�1�
�
�S�E�R�V�I�C�E�_�S�Y�S�T�E�M�_�S�T�A�R�T�	�=�	�1�
�
�S�E�R�V�I�C�E�_�E�R�R�O�R�_�S�E�V�E�R�E�	�=�	�2�
�
�D�e�f�a�u�l�t�I�n�s�t�a�n�c�e�	�	�=�	�"�n�p�s�v�c�t�r�i�g�"�
�
�A�l�t�i�t�u�d�e�A�c�t�i�v�i�t�y�M�o�n�i�t�o�r� �=� �	�"�4�6�0�0�0�"�
�
�I�n�s�t�a�n�c�e�F�l�a�g�s�	�	�=�	�0�x�0�
�
�

<=Back