Windows NT KAMIDAKI 10.0 build 19045 (Windows 10) AMD64
Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.3.9
Server IP : 192.168.3.16 & Your IP : 216.73.216.140
Domains :
Cant Read [ /etc/named.conf ]
User : SISTEMA
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
C: /
Windows /
SysWOW64 /
wbem /
Delete
Unzip
Name
Size
Permission
Date
Action
AutoRecover
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
Logs
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
Repository
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
en
[ DIR ]
drwxrwxrwx
2023-03-23 12:54
en-US
[ DIR ]
drwxrwxrwx
2023-11-16 06:32
pt-BR
[ DIR ]
drwxrwxrwx
2023-11-16 06:32
tmf
[ DIR ]
drwxrwxrwx
2019-12-07 10:14
xml
[ DIR ]
drwxrwxrwx
2019-12-07 10:15
AgentWmi.mof
17.1
KB
-rw-rw-rw-
2019-12-07 15:56
AgentWmiUninstall.mof
693
B
-rw-rw-rw-
2019-12-07 10:10
BthMtpEnum.mof
2.56
KB
-rw-rw-rw-
2019-12-07 10:10
CIWmi.mof
2.04
KB
-rw-rw-rw-
2019-12-07 10:10
DscCoreConfProv.mof
6.52
KB
-rw-rw-rw-
2019-12-07 10:10
FolderRedirectionWMIProvider.mof
8.79
KB
-rw-rw-rw-
2019-12-07 10:08
FunDisc.mof
702
B
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-Base.mof
31.36
KB
-rw-rw-rw-
2019-12-07 10:09
IMAPIv2-FileSystemSupport.mof
2.03
KB
-rw-rw-rw-
2019-12-07 10:10
IMAPIv2-LegacyShim.mof
759
B
-rw-rw-rw-
2019-12-07 10:10
IpmiDTrc.mof
638
B
-rw-rw-rw-
2019-12-07 10:08
IpmiPTrc.mof
763
B
-rw-rw-rw-
2019-12-07 10:08
L2SecHC.mof
2.28
KB
-rw-rw-rw-
2019-12-07 10:09
Microsoft.AppV.AppVClientWmi.dll
31.88
KB
-rw-rw-rw-
2023-11-16 03:02
Microsoft.AppV.AppVClientWmi.mof
11.42
KB
-rw-rw-rw-
2019-12-07 15:56
Microsoft.Uev.AgentWmi.dll
1.03
MB
-rw-rw-rw-
2025-06-10 19:46
Microsoft.Uev.ManagedAgentWmi.mof
3.06
KB
-rw-rw-rw-
2019-12-07 10:10
Microsoft.Uev.ManagedAgentWmiUninstall.mof
514
B
-rw-rw-rw-
2019-12-07 10:10
MsDtcWmi.mof
21.02
KB
-rw-rw-rw-
2019-12-07 10:09
OfflineFilesConfigurationWmiProvider.mof
5.43
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesConfigurationWmiProvider_Uninstall.mof
800
B
-rw-rw-rw-
2019-12-07 10:10
OfflineFilesWmiProvider.mof
14.25
KB
-rw-rw-rw-
2019-12-07 15:56
OfflineFilesWmiProvider_Uninstall.mof
2.11
KB
-rw-rw-rw-
2019-12-07 10:10
PS_MMAgent.mof
2.94
KB
-rw-rw-rw-
2019-12-07 10:10
PolicMan.dll
85.5
KB
-rw-rw-rw-
2019-12-07 15:56
PolicMan.mof
11.87
KB
-rw-rw-rw-
2019-12-07 15:56
PrintManagementProvider.dll
192
KB
-rw-rw-rw-
2025-05-14 02:05
RacWmiProv.dll
54
KB
-rw-rw-rw-
2019-12-07 10:10
RacWmiProv.mof
2.96
KB
-rw-rw-rw-
2019-12-07 10:10
Remove.Microsoft.AppV.AppvClientWmi.mof
830
B
-rw-rw-rw-
2019-12-07 10:10
SchedProv.mof
49.88
KB
-rw-rw-rw-
2019-12-07 10:09
UserStateWMIProvider.mof
3.18
KB
-rw-rw-rw-
2019-12-07 10:08
WMIADAP.exe
126
KB
-rwxrwxrwx
2024-06-13 15:20
WMIC.exe
417
KB
-rwxrwxrwx
2025-05-14 02:04
WMICOOKR.dll
73
KB
-rw-rw-rw-
2024-06-13 15:20
WPDShServiceObj.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:10
WdacWmiProv.dll
109
KB
-rw-rw-rw-
2019-12-07 10:10
Win32_Tpm.dll
47.5
KB
-rw-rw-rw-
2025-07-09 07:54
WinMgmt.exe
77.5
KB
-rwxrwxrwx
2023-11-16 03:00
Winsat.mof
1.51
KB
-rw-rw-rw-
2019-12-07 10:10
WinsatUninstall.mof
487
B
-rw-rw-rw-
2019-12-07 10:10
WmiApRpl.dll
91
KB
-rw-rw-rw-
2023-11-16 03:00
WmiDcPrv.dll
138
KB
-rw-rw-rw-
2023-11-16 03:00
WmiPerfClass.dll
92
KB
-rw-rw-rw-
2019-12-07 10:10
WmiPerfClass.mof
980
B
-rw-rw-rw-
2019-12-07 10:10
WmiPerfInst.dll
46.5
KB
-rw-rw-rw-
2019-12-07 10:10
WmiPerfInst.mof
804
B
-rw-rw-rw-
2019-12-07 10:10
WmiPrvSE.exe
408.5
KB
-rwxrwxrwx
2023-11-16 03:00
WsmAgent.mof
822
B
-rw-rw-rw-
2019-12-07 10:08
WsmAgentUninstall.mof
754
B
-rw-rw-rw-
2019-12-07 10:08
WsmAuto.mof
4.42
KB
-rw-rw-rw-
2019-12-07 10:08
cli.mof
31.86
KB
-rw-rw-rw-
2019-12-07 10:08
cliegaliases.mof
2.68
MB
-rw-rw-rw-
2019-12-07 10:08
dimsjob.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:09
dimsroam.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
dot3.mof
5.93
KB
-rw-rw-rw-
2019-12-07 10:09
eaimeapi.mof
1.27
KB
-rw-rw-rw-
2019-12-07 10:10
esscli.dll
364.5
KB
-rw-rw-rw-
2024-06-13 15:20
fastprox.dll
786.5
KB
-rw-rw-rw-
2025-05-14 02:04
fdSSDP.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
fdWNet.mof
716
B
-rw-rw-rw-
2019-12-07 10:09
fdWSD.mof
656
B
-rw-rw-rw-
2019-12-07 10:09
hbaapi.mof
471.2
KB
-rw-rw-rw-
2019-12-07 10:09
ipmiprr.dll
3.5
KB
-rw-rw-rw-
2019-12-07 10:09
ipmiprv.dll
159.5
KB
-rw-rw-rw-
2019-12-07 10:09
ipmiprv.mof
207.81
KB
-rw-rw-rw-
2019-12-07 10:08
ipsecsvc.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
iscsidsc.mof
19.41
KB
-rw-rw-rw-
2019-12-07 10:09
iscsihba.mof
111.33
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiprf.mof
44.96
KB
-rw-rw-rw-
2019-12-07 10:09
iscsirem.mof
4.4
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2.mof
36.29
KB
-rw-rw-rw-
2019-12-07 10:09
iscsiwmiv2_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
kerberos.mof
8.55
KB
-rw-rw-rw-
2019-12-07 10:09
l2gpstore.mof
1.53
KB
-rw-rw-rw-
2019-12-07 10:09
lsasrv.mof
13.46
KB
-rw-rw-rw-
2019-12-07 10:09
mispace.mof
1.04
MB
-rw-rw-rw-
2019-12-07 10:09
mispace_uninstall.mof
9.12
KB
-rw-rw-rw-
2019-12-07 10:09
mmc.mof
698
B
-rw-rw-rw-
2019-12-07 10:10
mofcomp.exe
26
KB
-rwxrwxrwx
2024-06-13 15:20
mofd.dll
196
KB
-rw-rw-rw-
2024-06-13 15:20
msdtcwmi.dll
165
KB
-rw-rw-rw-
2025-05-14 02:05
msfeeds.mof
1.48
KB
-rw-rw-rw-
2019-12-07 10:10
msfeedsbs.mof
1.54
KB
-rw-rw-rw-
2019-12-07 10:10
msiscsi.mof
4.69
KB
-rw-rw-rw-
2019-12-07 10:09
mstsc.mof
1.17
KB
-rw-rw-rw-
2019-12-07 10:10
mstscax.mof
2.01
KB
-rw-rw-rw-
2019-12-07 10:10
msv1_0.mof
7.54
KB
-rw-rw-rw-
2019-12-07 10:09
mswmdm.mof
1.67
KB
-rw-rw-rw-
2019-12-07 10:10
ncsi.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:09
netprofm.mof
1.09
KB
-rw-rw-rw-
2019-12-07 10:09
networkitemfactory.mof
683
B
-rw-rw-rw-
2019-12-07 10:09
newdev.mof
3.59
KB
-rw-rw-rw-
2019-12-07 10:09
nlasvc.mof
3.74
KB
-rw-rw-rw-
2019-12-07 10:09
nlsvc.mof
2.81
KB
-rw-rw-rw-
2019-12-07 10:09
npivwmi.mof
31.5
KB
-rw-rw-rw-
2019-12-07 10:09
nshipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:09
onex.mof
4.7
KB
-rw-rw-rw-
2019-12-07 10:09
p2p-mesh.mof
2.32
KB
-rw-rw-rw-
2019-12-07 10:10
p2p-pnrp.mof
2.24
KB
-rw-rw-rw-
2019-12-07 10:10
polstore.mof
1.25
KB
-rw-rw-rw-
2019-12-07 10:09
portabledeviceapi.mof
4.2
KB
-rw-rw-rw-
2019-12-07 15:56
portabledeviceclassextension.mof
3.13
KB
-rw-rw-rw-
2019-12-07 10:10
portabledeviceconnectapi.mof
1.74
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicetypes.mof
3.41
KB
-rw-rw-rw-
2019-12-07 10:10
portabledevicewiacompat.mof
1.72
KB
-rw-rw-rw-
2019-12-07 10:10
ppcRsopCompSchema.mof
1.95
KB
-rw-rw-rw-
2019-12-07 10:09
ppcRsopUserSchema.mof
1.94
KB
-rw-rw-rw-
2019-12-07 10:09
qmgr.mof
2.25
KB
-rw-rw-rw-
2019-12-07 10:09
rawxml.xsl
623
B
-rw-rw-rw-
2019-12-07 10:08
rdpendp.mof
1.1
KB
-rw-rw-rw-
2019-12-07 10:10
regevent.mof
109.08
KB
-rw-rw-rw-
2019-12-07 10:08
samsrv.mof
61.08
KB
-rw-rw-rw-
2019-12-07 10:09
scersop.mof
8.12
KB
-rw-rw-rw-
2019-12-07 10:09
schannel.mof
1.05
KB
-rw-rw-rw-
2019-12-07 10:09
schedprov.dll
178.5
KB
-rw-rw-rw-
2023-11-16 03:00
setupapi.mof
3.6
KB
-rw-rw-rw-
2019-12-07 10:09
stdprov.dll
108.5
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi.mof
329.9
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru.mof
1.85
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_passthru_uninstall.mof
1.61
KB
-rw-rw-rw-
2019-12-07 10:09
storagewmi_uninstall.mof
13.16
KB
-rw-rw-rw-
2019-12-07 10:09
tcpip.mof
2.99
KB
-rw-rw-rw-
2019-12-07 10:09
texttable.xsl
6.13
KB
-rw-rw-rw-
2019-12-07 10:08
textvaluelist.xsl
2.7
KB
-rw-rw-rw-
2019-12-07 10:08
tsmf.mof
1.21
KB
-rw-rw-rw-
2019-12-07 10:10
tspkg.mof
1.04
KB
-rw-rw-rw-
2019-12-07 10:09
vds.mof
59.63
KB
-rw-rw-rw-
2019-12-07 10:08
vdswmi.dll
169.5
KB
-rw-rw-rw-
2019-12-07 10:09
viewprov.dll
158.5
KB
-rw-rw-rw-
2025-05-14 02:05
vss.mof
59.05
KB
-rw-rw-rw-
2019-12-07 10:09
vsswmi.dll
113.5
KB
-rw-rw-rw-
2019-12-07 10:10
wbemcntl.dll
294.5
KB
-rw-rw-rw-
2023-11-16 03:00
wbemdisp.dll
237.5
KB
-rw-rw-rw-
2019-12-07 10:09
wbemdisp.tlb
58.5
KB
-rw-rw-rw-
2019-12-07 10:09
wbemprox.dll
36
KB
-rw-rw-rw-
2024-06-13 15:20
wbemsvc.dll
47.5
KB
-rw-rw-rw-
2024-06-13 15:20
wdigest.mof
1.08
KB
-rw-rw-rw-
2019-12-07 10:09
wfs.mof
2.09
KB
-rw-rw-rw-
2019-12-06 19:26
whqlprov.mof
3.88
KB
-rw-rw-rw-
2019-12-07 10:09
wininit.mof
1.71
KB
-rw-rw-rw-
2019-12-07 10:09
winipsec.mof
1.24
KB
-rw-rw-rw-
2019-12-07 10:09
wlan.mof
12.58
KB
-rw-rw-rw-
2019-12-07 10:09
wmiutils.dll
101.5
KB
-rw-rw-rw-
2024-06-13 15:20
wmp.mof
4.77
KB
-rw-rw-rw-
2019-04-18 20:43
wpdbusenum.mof
2.74
KB
-rw-rw-rw-
2019-12-07 10:10
wpdcomp.mof
2.75
KB
-rw-rw-rw-
2019-12-07 10:10
wpdfs.mof
2.68
KB
-rw-rw-rw-
2019-12-07 10:10
wpdmtp.mof
3.27
KB
-rw-rw-rw-
2019-12-07 10:10
wpdshext.mof
3.24
KB
-rw-rw-rw-
2019-12-07 10:10
wpdsp.mof
2.92
KB
-rw-rw-rw-
2019-12-07 10:10
wscenter.mof
5.81
KB
-rw-rw-rw-
2023-03-15 03:02
wsp_fs.mof
548.78
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_fs_uninstall.mof
2.71
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health.mof
554.91
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_health_uninstall.mof
2.31
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr.mof
592.55
KB
-rw-rw-rw-
2019-12-07 10:09
wsp_sr_uninstall.mof
3.38
KB
-rw-rw-rw-
2019-12-07 10:09
xsl-mappings.xml
2.8
KB
-rw-rw-rw-
2019-12-07 10:08
xwizards.mof
2.15
KB
-rw-rw-rw-
2019-12-07 10:10
Save
Rename
//********************************************* //*** MSV1_0 SSP: MSV1_0 //********************************************* #pragma autorecover #pragma classflags("forceupdate") #pragma namespace ("\\\\.\\Root\\WMI") [Dynamic, Description("Security: NTLM Authentication") : amended, Guid("{5BBB6C18-AA45-49b1-A15F-085F7ED0AA90}"), locale("MS\\0x409")] class MSV1_0DebugTrace : EventTrace { [ Description ("Enable Flags") : amended, ValueDescriptions{ "Error Flag", "Warning Flag", "Init Flag", "Misc Flag", "Logon Session Flag", "Leak Track Flag", "Lpc Flag", "Lpc More Flag", "Api Flag", "Api More Flag", "Session Keys Flag", "Negotiate Flag", "Updates Flag", "NTLM V2 Flag", "Credentials Flag", "Protocol Version Flag", "Target Flag"} : amended, Values{"Error", "Warning", "Init", "Misc", "LogonSess", "Leak", "Lpc", "LpcMore", "Api", "ApiMore", "SKey", "Nego", "Updates", "NtLmV2", "Cred", "Version", "Target"}, ValueMap{"0x00000001", "0x00000002", "0x00000004", "0x00000008", "0x00000010", "0x00000020", "0x00000040", "0x00000080", "0x00000100", "0x00000200", "0x00000400", "0x00000800", "0x00001000", "0x00002000", "0x00004000", "0x00008000", "0x00010000"} : amended ] uint32 Flags; }; [Dynamic, Description("NTLM Security Protocol") : amended, Guid("{C92CF544-91B3-4dc0-8E11-C580339A0BF8}"), locale("MS\\0x409")] class MSV1_0Trace:EventTrace { }; [Dynamic, Description("NTLM Server Accept") : amended, Guid("{94d4c9eb-0d01-41ae-99e8-15b26b593a83}"), DisplayName("NtlmServerAccept"), locale("MS\\0x409") ] class NtlmServerAccept:MSV1_0Trace { }; [Dynamic, Description("NTLM Server Accept") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmServerAccept_Start:NtlmServerAccept { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; }; [Dynamic, Description("NTLM Server Accept") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmServerAccept_End:NtlmServerAccept { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; [WmiDataId(3), Description("Out-Context") : amended, pointer, read] uint32 OutContext; [WmiDataId(4), Description("Status") : amended, read] uint32 Status; }; [Dynamic, Description("NTLM Server Accept") : amended, EventType(0), EventTypeName("Info"), locale("MS\\0x409") ] class NtlmServerAccept_Info:NtlmServerAccept { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; [WmiDataId(3), Description("Out-Context") : amended, pointer, read] uint32 OutContext; [WmiDataId(4), Description("Flags") : amended, read] uint32 Flags; [WmiDataId(5), Description("Client User Name") : amended, StringTermination("Counted"), format("w"), read] string UserName; [WmiDataId(6), Description("Client Domain Name") : amended, StringTermination("Counted"), format("w"), read] string DomainName; [WmiDataId(7), Description("Client Workstation") : amended, StringTermination("Counted"), format("w"), read] string Workstation; }; [Dynamic, Description("NTLM Client Initialize") : amended, Guid("{6df28b22-73be-45cc-ba80-8b332b35a21d}"), DisplayName("NtlmClientInitialize"), locale("MS\\0x409") ] class NtlmClientInitialize:MSV1_0Trace { }; [Dynamic, Description("NTLM Client Initialize") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmClientInitialize_Start:NtlmClientInitialize { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; }; [Dynamic, Description("NTLM Client Initialize") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmClientInitialize_End:NtlmClientInitialize { [WmiDataId(1), Description("Stage Hint") : amended, read] uint32 StageHint; [WmiDataId(2), Description("In-Context") : amended, pointer, read] uint32 InContext; [WmiDataId(3), Description("Out-Context") : amended, pointer, read] uint32 OutContext; [WmiDataId(4), Description("Status") : amended, read] uint32 Status; }; [Dynamic, Description("NTLM Logon User") : amended, Guid("{19196b33-a302-4c12-9d5a-eac149e93c46}"), DisplayName("NtlmLogonUser"), locale("MS\\0x409") ] class NtlmLogonUser:MSV1_0Trace { }; [Dynamic, Description("NTLM Logon User") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmLogonUser_Start:NtlmLogonUser { }; [Dynamic, Description("NTLM Logon User") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmLogonUser_End:NtlmLogonUser { [WmiDataId(1), Description("Status") : amended, read] uint32 Status; [WmiDataId(2), Description("Logon Type") : amended, read] uint32 LogonType; [WmiDataId(3), Description("User Name") : amended, StringTermination("Counted"), format("w"), read] string UserName; [WmiDataId(4), Description("Domain Name") : amended, StringTermination("Counted"), format("w"), read] string DomainName; }; [Dynamic, Description("NTLM Validate Credentials") : amended, Guid("{34d84181-c28a-41d8-bb9e-995190df83df}"), DisplayName("NtlmValidateUser"), locale("MS\\0x409") ] class NtlmValidateUser:MSV1_0Trace { }; [Dynamic, Description("NTLM Validate Credentials") : amended, EventType(1), EventTypeName("Start"), locale("MS\\0x409") ] class NtlmValidateUser_Start:NtlmValidateUser { }; [Dynamic, Description("NTLM Validate Credentials") : amended, EventType(2), EventTypeName("End"), locale("MS\\0x409") ] class NtlmValidateUser_End:NtlmValidateUser { [WmiDataId(1), Description("Success Bitmask") : amended, read] uint32 Success; [WmiDataId(2), Description("Logon Server") : amended, StringTermination("Counted"), format("w"), read] string LogonServer; [WmiDataId(3), Description("Domain Name") : amended, StringTermination("Counted"), format("w"), read] string LogonDomain; [WmiDataId(4), Description("User Name") : amended, StringTermination("Counted"), format("w"), read] string UserName; [WmiDataId(5), Description("Logon Workstation") : amended, StringTermination("Counted"), format("w"), read] string Workstation; };