webshell

Ghost Exploiter Team Official

C:/Windows/System32/DriverStore/FileRepository/vdrvroot.inf_amd64_25badaf7ea5e62b4/

File / Folder	Size	Action
.	-
vdrvroot.inf	3.947KB	edt ren
vdrvroot.sys	97.484KB	edt ren

��;�/�*�+�+�
�
�;�
�
�;�C�o�p�y�r�i�g�h�t� �(�c�)� �M�i�c�r�o�s�o�f�t� �C�o�r�p�o�r�a�t�i�o�n�.� � �A�l�l� �r�i�g�h�t�s� �r�e�s�e�r�v�e�d�.�
�
�;�
�
�;�M�o�d�u�l�e� �N�a�m�e�:�
�
�;�
�
�;� � � � �v�d�r�v�r�o�o�t�.�i�n�f�
�
�;�
�
�;�-�-�*�/�
�
�
�
�[�V�e�r�s�i�o�n�]�
�
�S�i�g�n�a�t�u�r�e�=�"�$�W�I�N�D�O�W�S� �N�T�$�"�
�
�C�l�a�s�s�=�S�y�s�t�e�m�
�
�C�l�a�s�s�G�u�i�d�=�{�4�D�3�6�E�9�7�D�-�E�3�2�5�-�1�1�C�E�-�B�F�C�1�-�0�8�0�0�2�B�E�1�0�3�1�8�}�
�
�P�r�o�v�i�d�e�r�=�%�M�S�F�T�%�
�
�P�n�p�L�o�c�k�d�o�w�n�=�1�
�
�D�r�i�v�e�r�V�e�r� �=� �0�6�/�2�1�/�2�0�0�6�,�1�0�.�0�.�2�0�3�4�8�.�2�8�4�9�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�N�a�m�e�s�]�
�
�3�4�2�6�=�w�i�n�d�o�w�s� �c�d�
�
�
�
�[�S�o�u�r�c�e�D�i�s�k�s�F�i�l�e�s�]�
�
�v�d�r�v�r�o�o�t�.�s�y�s� � � � � � � �=� �3�4�2�6�
�
�
�
�[�D�e�s�t�i�n�a�t�i�o�n�D�i�r�s�]�
�
�D�e�f�a�u�l�t�D�e�s�t�D�i�r� �=� �1�2� � � � � � � � � � � � � � � � �;� �D�I�R�I�D�_�D�R�I�V�E�R�S�
�
�
�
�[�C�o�n�t�r�o�l�F�l�a�g�s�]�
�
�B�a�s�i�c�D�r�i�v�e�r�O�k�=�*�
�
�E�x�c�l�u�d�e�F�r�o�m�S�e�l�e�c�t�=�*�
�
�
�
�[�M�a�n�u�f�a�c�t�u�r�e�r�]�
�
�%�M�S�F�T�%�=�v�d�r�v�r�o�o�t�_�d�e�v�i�c�e�,�N�T�a�m�d�6�4�
�
�
�
�[�v�d�r�v�r�o�o�t�_�d�e�v�i�c�e�.�N�T�a�m�d�6�4�]�
�
�%�V�D�R�V�R�O�O�T�.�D�e�v�i�c�e�D�e�s�c�%�	�=� �V�D�R�V�R�O�O�T�,� �R�o�o�t�\�V�D�R�V�R�O�O�T� � � � � �;� �V�i�r�t�u�a�l� �D�r�i�v�e� �E�n�u�m�e�r�a�t�o�r�
�
�
�
�;�
�
�;� �G�e�n�e�r�a�l� �i�n�s�t�a�l�l�a�t�i�o�n� �s�e�c�t�i�o�n�
�
�;�
�
�
�
�[�V�D�R�V�R�O�O�T�]�
�
�C�o�p�y�F�i�l�e�s�=�V�D�R�V�R�O�O�T�_�C�o�p�y�F�i�l�e�s�
�
�
�
�[�V�D�R�V�R�O�O�T�_�C�o�p�y�F�i�l�e�s�]�
�
�v�d�r�v�r�o�o�t�.�s�y�s�,�,�,�0�x�1�0�0� �;� �C�O�P�Y�F�L�G�_�P�R�O�T�E�C�T�E�D�_�W�I�N�D�O�W�S�_�D�R�I�V�E�R�_�F�I�L�E�
�
�
�
�;�
�
�;� �S�e�r�v�i�c�e� �I�n�s�t�a�l�l�a�t�i�o�n�
�
�;�
�
�
�
�[�V�D�R�V�R�O�O�T�.�S�e�r�v�i�c�e�s�]�
�
�A�d�d�S�e�r�v�i�c�e�=�v�d�r�v�r�o�o�t�,� �%�S�P�S�V�C�I�N�S�T�_�A�S�S�O�C�S�E�R�V�I�C�E�%�,� �V�D�R�V�R�O�O�T�_�S�e�r�v�i�c�e�
�
�
�
�[�V�D�R�V�R�O�O�T�.�H�W�]�
�
�A�d�d�R�e�g�=�V�D�R�V�R�O�O�T�_�H�W�.�A�d�d�R�e�g�
�
�
�
�[�V�D�R�V�R�O�O�T�_�S�e�r�v�i�c�e�]�
�
�D�i�s�p�l�a�y�N�a�m�e� � � � �=� �%�v�d�r�v�r�o�o�t�_�s�v�c�d�e�s�c�%�
�
�S�e�r�v�i�c�e�T�y�p�e� � � � �=� �%�S�E�R�V�I�C�E�_�K�E�R�N�E�L�_�D�R�I�V�E�R�%�
�
�S�t�a�r�t�T�y�p�e� � � � � � �=� �%�S�E�R�V�I�C�E�_�B�O�O�T�_�S�T�A�R�T�%�
�
�E�r�r�o�r�C�o�n�t�r�o�l� � � �=� �%�S�E�R�V�I�C�E�_�E�R�R�O�R�_�C�R�I�T�I�C�A�L�%�
�
�S�e�r�v�i�c�e�B�i�n�a�r�y� � �=� �%�1�2�%�\�v�d�r�v�r�o�o�t�.�s�y�s�
�
�L�o�a�d�O�r�d�e�r�G�r�o�u�p� �=� �"�B�o�o�t� �B�u�s� �E�x�t�e�n�d�e�r�"�
�
�
�
�[�V�D�R�V�R�O�O�T�_�H�W�.�A�d�d�R�e�g�]�
�
�H�K�R�,�V�i�r�t�u�a�l�D�r�i�v�e�S�u�p�p�o�r�t�,�V�H�D�,�0�x�1�0�0�0�1�,�1�
�
�
�
�;�.�
�
�;� �A�l�l�o�w� �g�e�n�e�r�i�c�-�a�l�l� �a�c�c�e�s�s� �t�o� �B�u�i�l�t�-�i�n� �a�d�m�i�n�i�s�t�r�a�t�o�r�s�,� �L�o�c�a�l� �s�y�s�t�e�m�,� �g�e�n�e�r�i�c�-�r�e�a�d�/�w�r�i�t�e� �t�o� �e�v�e�r�y�o�n�e� �a�n�d� �t�h�e� �V�m�W�o�r�k�e�r�P�r�o�c�e�s�s� �c�a�p�a�b�i�l�i�t�y�,� �a�n�d� �g�e�n�e�r�i�c�-�r�e�a�d� �t�o� �r�e�s�t�r�i�c�t�e�d� �c�o�d�e�.�
�
�;�
�
�H�K�R�,�,�S�e�c�u�r�i�t�y�,�,�"�D�:�P�(�A�;�;�G�A�;�;�;�B�A�)�(�A�;�;�G�A�;�;�;�S�Y�)�(�A�;�;�G�R�G�W�;�;�;�W�D�)�(�A�;�N�P�;�G�R�G�W�;�;�;�S�-�1�-�1�5�-�3�-�1�0�2�4�-�2�2�6�8�8�3�5�2�6�4�-�3�7�2�1�3�0�7�6�2�9�-�2�4�1�9�8�2�0�4�5�-�1�7�3�6�4�5�1�5�2�-�1�4�9�0�8�7�9�1�7�6�-�1�0�4�6�4�3�4�4�1�-�2�9�1�5�9�6�0�8�9�2�-�1�6�1�2�4�6�0�7�0�4�)�(�A�;�;�G�R�;�;�;�R�C�)�"�
�
�
�
�[�S�t�r�i�n�g�s�]�
�
�
�
�;�
�
�;� �N�o�n�-�L�o�c�a�l�i�z�a�b�l�e�
�
�;�
�
�
�
�M�S�F�T� �=� �"�M�i�c�r�o�s�o�f�t�"�
�
�
�
�S�P�S�V�C�I�N�S�T�_�A�S�S�O�C�S�E�R�V�I�C�E� �=� �0�x�0�0�0�0�0�0�0�2�
�
�S�E�R�V�I�C�E�_�K�E�R�N�E�L�_�D�R�I�V�E�R� � �=� �1�
�
�S�E�R�V�I�C�E�_�B�O�O�T�_�S�T�A�R�T� � � � � �=� �0�
�
�S�E�R�V�I�C�E�_�E�R�R�O�R�_�C�R�I�T�I�C�A�L� �=� �3�
�
�
�
�;�
�
�;� �L�o�c�a�l�i�z�a�b�l�e�
�
�;�
�
�
�
�V�D�R�V�R�O�O�T�.�D�e�v�i�c�e�D�e�s�c� �=� �"�M�i�c�r�o�s�o�f�t� �V�i�r�t�u�a�l� �D�r�i�v�e� �E�n�u�m�e�r�a�t�o�r�"�
�
�v�d�r�v�r�o�o�t�_�s�v�c�d�e�s�c� �=� �"�M�i�c�r�o�s�o�f�t� �V�i�r�t�u�a�l� �D�r�i�v�e� �E�n�u�m�e�r�a�t�o�r�"�
�
�

<=Back