Skip to content

Instantly share code, notes, and snippets.

@msuiche
Created January 13, 2017 06:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save msuiche/4f1b1e3104070c6baea3db6f9d096d3a to your computer and use it in GitHub Desktop.
Save msuiche/4f1b1e3104070c6baea3db6f9d096d3a to your computer and use it in GitHub Desktop.
file list equationdrug
61110bea272972903985d5d5e452802c DSZOPSDISK/Resources/Df/Uploads/i386-winnt/DoubleFeatureDll.dll.unfinalized
0d81f9972863c6d8c90100a73b0600ab DSZOPSDISK/Resources/DmGz/Uploads/i386/winnt/ntfltmgr.sys
e14ab6e6ae835792979ff50e647b89c8 DSZOPSDISK/Resources/DSky/Uploads/i386/winnt/tdi6.sys
997ba8c988340a1c644cf9a5f67e4177 DSZOPSDISK/Resources/Ep/Plugins/Files/DuplicateToken_Implant.dll
425fb612ba62fc1ecad9fb24d10f9bfa DSZOPSDISK/Resources/Ep/Plugins/Files/EventLogEdit_Implant.dll
c11142caa3013f852ccb698cc6008b51 DSZOPSDISK/Resources/Ep/Plugins/Files/GetAdmin_Implant.dll
bdd2b462e050ef2fa7778526ea4a2a58 DSZOPSDISK/Resources/Ep/Plugins/Files/kill_Implant.dll
199796e3f413074d5fdef7fe8334eccf DSZOPSDISK/Resources/Ep/Plugins/Files/LSADUMP_Implant.dll
cf5b0d82d39669f584258389f4307b82 DSZOPSDISK/Resources/Ep/Plugins/Files/modifyAudit_Implant.dll
8187650eb74ccb3f0fb647335fd54d30 DSZOPSDISK/Resources/Ep/Plugins/Files/modifyAuthentication_Implant.dll
b46df0dbe9774125cdc6f3b2befee900 DSZOPSDISK/Resources/Ep/Plugins/Files/ModifyGroup_Implant.dll
fbd7816d2e3e36f8976e18dcf0301ce8 DSZOPSDISK/Resources/Ep/Plugins/Files/ModifyPrivilege_Implant.dll
1aea840c3ec3ebaeeebd20a6a8d7e03f DSZOPSDISK/Resources/Ep/Plugins/Files/nethide_Implant.dll
13031e736ee4698b8c4813a8f2ae1848 DSZOPSDISK/Resources/Ep/Plugins/Files/PassFreely_Implant.dll
eb6aece07b1a2e2dce95a1faa2657bf2 DSZOPSDISK/Resources/Ep/Plugins/Files/PortMap_Implant.dll
0be1b2fa181721aff98b0bc05b814734 DSZOPSDISK/Resources/Ep/Plugins/Files/ProcessHide_Implant.dll
0c93eee98a5a389ca7ac14064a2445b9 DSZOPSDISK/Resources/Ep/Plugins/Files/processinfo_Implant.dll
b3ecaf9399df17a5dcddb45e9556beff DSZOPSDISK/Resources/Ep/Plugins/Files/ProcessOptions_Implant.dll
dec51cf04be82ed22948a3275ef541f9 DSZOPSDISK/Resources/Ep/Plugins/Files/pwdump_Implant.dll
ba1711b9cd87a10f2ad1816fb55c10b8 DSZOPSDISK/Resources/Ep/Plugins/Files/RunAsChild_Implant.dll
48496c7db1c66656e054cccbc01930cc DSZOPSDISK/Resources/FlAv/Uploads/i386/winnt/ntevt.sys
f9fdc58c2a3ea2c00d0caa3c33d6a575 DSZOPSDISK/Resources/FlAv/Uploads/x64/winnt/ntevt.sys
ecb7174bafed0c53cdc1227e301cf003 DSZOPSDISK/Resources/GROK/1.2.0.1/Uploads/msgkd.ex_
2f0cd139c60ae484de4b076d34b8b39e DSZOPSDISK/Resources/GROK/1.2.0.1/Uploads/msgki.ex_
9dab2f84eb817aab4ccf8c237f88b422 DSZOPSDISK/Resources/GROK/1.2.0.1/Uploads/msgks.ex_
a54f0112500c956c21dc13285f43fc7e DSZOPSDISK/Resources/GROK/1.2.0.1/Uploads/msgku.ex_
164f2f1132a8ae98a4ffa070eb2ac8ae DSZOPSDISK/Resources/Pc2.2/Level3/i386-winnt/release/PC_Level3_dll
d2effa60a83e6fc5533e6ba5a3c306d4 DSZOPSDISK/Resources/Pc2.2/Level3/i386-winnt/release/PC_Level3_flav_dll
6f55a9c081989468043c1e9887d45aea DSZOPSDISK/Resources/Pc2.2/Level3/i386-winnt/release/PC_Level3_http_dll
42e2e64e897606eb936372a8ee616ab0 DSZOPSDISK/Resources/Pc2.2/Level3/i386-winnt/release/PC_Level3_http_flav_dll
22e03cff8f2f6bc56e61196fa98b19e1 DSZOPSDISK/Resources/Pc2.2/Level3/x64-winnt/release/PC_Level3_dll
2ece5c84446a46f80bb7701ae922c8d7 DSZOPSDISK/Resources/Pc2.2/Level3/x64-winnt/release/PC_Level3_flav_dll
2c6cee802cfe8a7489d4782b123ec7ca DSZOPSDISK/Resources/Pc2.2/Level3/x64-winnt/release/PC_Level3_http_dll
d962749f06e24167c61e67a7c1bc1abd DSZOPSDISK/Resources/Pc2.2/Level3/x64-winnt/release/PC_Level3_http_flav_dll
7a3e60615f2b3283fe95e80719e901a3 DSZOPSDISK/Resources/Pc2.2/Level4/i386-winnt/release/PC_Level4_flav_dll
43406f7487979e55751d9f8a1174b33c DSZOPSDISK/Resources/Pc2.2/Level4/i386-winnt/release/PC_Level4_flav_exe
609f9d1b05d217e8b05feab6ebf6fc52 DSZOPSDISK/Resources/Pc2.2/Level4/i386-winnt/release/PC_Level4_http_flav_dll
d093db7f175af28d6e7492918d38234f DSZOPSDISK/Resources/Pc2.2/Level4/x64-winnt/release/PC_Level4_flav_dll
fb97f8b8535de1e2cb7eac6177226cca DSZOPSDISK/Resources/Pc2.2/Level4/x64-winnt/release/PC_Level4_http_flav_dll
b91c125ee67eccb5843000fd22be0935 DSZOPSDISK/Resources/Pc/Legacy/i386-winnt/release/PC_Legacy_dll
14919dab3a53ab53c3890a68d0c1aad9 DSZOPSDISK/Resources/Pc/Level3/i386-winnt/release/PC_Level3_dll
4917f640c673aa8f15fc4df9a4c7af5e DSZOPSDISK/Resources/Pc/Level3/i386-winnt/release/PC_Level3_exe
0bcba9c0034d6a522bcef20527227801 DSZOPSDISK/Resources/Pc/Level3/legacy/Spcss32.ex_
a484f65b378023daf0608d9f02245122 DSZOPSDISK/Resources/Pc/Level3/x64-winnt/release/PC_Level3_dll
3d66fc9b38744ed0ea1888c349c464c0 DSZOPSDISK/Resources/Pc/Level4/i386-winnt/release/PC_Level4_dll
103789c7f19e2dff6aa222dc1bb291bf DSZOPSDISK/Resources/Pc/Level4/i386-winnt/release/PC_Level4_exe
877d70f3461b8b9be7223860e64901f8 DSZOPSDISK/Resources/Pc/Level4/i386-winnt/release/PC_Level4_FRPA_dll
d0687aca35e3294b2d2e25f9dff5cfd2 DSZOPSDISK/Resources/Pc/Level4/i386-winnt/release/PC_Level4_http_WSHA_dll.renamed
9060e024cf54af1ee738cadf6eb575c4 DSZOPSDISK/Resources/Pc/Level4/i386-winnt/release/PC_Level4_UTBU_dll
598004e181a57a873ff3094670668996 DSZOPSDISK/Resources/Pc/Level4/i386-winnt/release/PC_Level4_WSHA_dll.renamed
90b42c32aa3442106c0eb49a7e9527d6 DSZOPSDISK/Resources/Pc/Level4/x64-winnt/release/PC_Level4_dll
b506eb0cf30b0b0f9aef5904cad01085 DSZOPSDISK/Resources/Pc/Level4/x64-winnt/release/PC_Level4_FRPA_dll
4c42669a7620ad3494d1fd409dc4f61e DSZOPSDISK/Resources/Pc/Level4/x64-winnt/release/PC_Level4_http_WSHA_dll.renamed
b2981b5e2c63e8278c909c70077c65d1 DSZOPSDISK/Resources/Pc/Level4/x64-winnt/release/PC_Level4_WSHA_dll.renamed
4a184a987d297e6b1d578d5c25a4980c DSZOPSDISK/Resources/ST1.14/DXGHLP16.SYS
74de13b5ea68b3da24addc009f84baee DSZOPSDISK/Resources/ST1.14/mstcp32.sys
88c6980345e31fb53df122348985c13d DSZOPSDISK/Resources/StLa/Uploads/i386/mssld.dll
d05a64df9a4aded3c5906764b2f69476 DSZOPSDISK/Resources/StLa/Uploads/i386/msslu.dll
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment