Sharefinder Scan Report

sharefinder 1.2.0

21/08/2025 21:39:42 - 21/08/2025 21:39:42

Identified Hosts

IP Version Hostname Domain Signing Shares
192.168.56.11 Windows NT 10.0 Build 17763 WINTERFELL north.sevenkingdoms.local true 1
192.168.56.22 Windows NT 10.0 Build 17763 CASTELBLACK north.sevenkingdoms.local false 2

Shares

WINTERFELL.north.sevenkingdoms.local (192.168.56.11)
Host information

Version: Windows NT 10.0 Build 17763

Signing: true

Shares
Name Description Readable Writable
SYSVOL Logon server share true false
Share: SYSVOL
Type Name Size Last Modified
dir north.sevenkingdoms.local 0 2025-03-02 18:14:48.51 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local
Type Name Size Last Modified
dir DfsrPrivate 0 2025-03-02 18:25:43.731717 +0500 +05
dir Policies 0 2025-03-02 19:49:24.056213 +0500 +05
dir scripts 0 2025-03-02 19:48:56.462258 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies
Type Name Size Last Modified
dir {31B2F340-016D-11D2-945F-00C04FB984F9} 0 2025-03-02 18:14:59.599071 +0500 +05
dir {6AC1786C-016F-11D2-945F-00C04fB984F9} 0 2025-03-02 18:14:59.599071 +0500 +05
dir {6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5} 0 2025-03-02 19:49:24.087843 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}
Type Name Size Last Modified
dir MACHINE 0 2025-03-02 18:14:59.599071 +0500 +05
dir USER 0 2025-03-02 18:14:59.599071 +0500 +05
file GPT.INI 22 2025-03-02 18:38:38.888108 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE
Type Name Size Last Modified
dir Microsoft 0 2025-03-02 18:14:59.599071 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft
Type Name Size Last Modified
dir Windows NT 0 2025-03-02 18:14:59.599071 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\Windows NT
Type Name Size Last Modified
dir SecEdit 0 2025-03-02 18:38:38.872451 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\Windows NT\SecEdit
Type Name Size Last Modified
file GptTmpl.inf 1192 2025-03-02 18:38:38.84119 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER
Type Name Size Last Modified
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}
Type Name Size Last Modified
dir MACHINE 0 2025-03-02 18:14:59.599071 +0500 +05
dir USER 0 2025-03-02 18:14:59.599071 +0500 +05
file GPT.INI 22 2025-03-02 18:14:59.599071 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE
Type Name Size Last Modified
dir Microsoft 0 2025-03-02 18:14:59.599071 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft
Type Name Size Last Modified
dir Windows NT 0 2025-03-02 18:14:59.599071 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\Windows NT
Type Name Size Last Modified
dir SecEdit 0 2025-03-02 18:14:59.599071 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\Windows NT\SecEdit
Type Name Size Last Modified
file GptTmpl.inf 3764 2025-03-02 18:14:59.599071 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\USER
Type Name Size Last Modified
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5}
Type Name Size Last Modified
dir Machine 0 2025-03-02 19:49:24.494003 +0500 +05
dir User 0 2025-03-02 19:49:24.447666 +0500 +05
file GPO.cmt 32 2025-03-02 19:49:24.103269 +0500 +05
file GPT.INI 64 2025-03-02 19:49:24.494003 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5}\Machine
Type Name Size Last Modified
file Registry.pol 200 2025-03-02 19:49:24.47898 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\Policies\{6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5}\User
Type Name Size Last Modified
file Registry.pol 202 2025-03-02 19:49:24.447666 +0500 +05
Directory: SYSVOL\north.sevenkingdoms.local\scripts
Type Name Size Last Modified
file script.ps1 165 2025-03-02 19:48:53.25907 +0500 +05
file secret.ps1 869 2025-03-02 19:48:55.728352 +0500 +05
CASTELBLACK.north.sevenkingdoms.local (192.168.56.22)
Host information

Version: Windows NT 10.0 Build 17763

Signing: false

Shares
Name Description Readable Writable
all Basic RW share for all true true
Share: all
Type Name Size Last Modified
file arya.txt 413 2025-03-02 19:48:54.324746 +0500 +05
public Basic Read share for all domain users true true

Identified Files

Host Share Path Size Last Modified Filename
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\GPT.INI 22 2025-03-02 18:38:38.888108 +0500 +05 GPT.INI
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\MACHINE\Microsoft\Windows NT\SecEdit\GptTmpl.inf 1192 2025-03-02 18:38:38.84119 +0500 +05 GptTmpl.inf
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\GPT.INI 22 2025-03-02 18:14:59.599071 +0500 +05 GPT.INI
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\Windows NT\SecEdit\GptTmpl.inf 3764 2025-03-02 18:14:59.599071 +0500 +05 GptTmpl.inf
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5}\GPO.cmt 32 2025-03-02 19:49:24.103269 +0500 +05 GPO.cmt
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5}\GPT.INI 64 2025-03-02 19:49:24.494003 +0500 +05 GPT.INI
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5}\Machine\Registry.pol 200 2025-03-02 19:49:24.47898 +0500 +05 Registry.pol
192.168.56.11 SYSVOL north.sevenkingdoms.local\Policies\{6CB8F7E3-2EAE-4C0B-ADBB-68A2057429C5}\User\Registry.pol 202 2025-03-02 19:49:24.447666 +0500 +05 Registry.pol
192.168.56.11 SYSVOL north.sevenkingdoms.local\scripts\script.ps1 165 2025-03-02 19:48:53.25907 +0500 +05 script.ps1
192.168.56.11 SYSVOL north.sevenkingdoms.local\scripts\secret.ps1 869 2025-03-02 19:48:55.728352 +0500 +05 secret.ps1
192.168.56.22 all arya.txt 413 2025-03-02 19:48:54.324746 +0500 +05 arya.txt