Webshell Akmal archtte id
System:
Microsoft Windows NT 10.0.20348.0
Server:
Microsoft-IIS/10.0
User:
buyyou
Directory:
C:
\
MyData
\
WWW
\
asc365
\
Name
Size
Type
Actions
ASC365_CANADA
-
Directory
Rename
Delete
ASC365_Store01
-
Directory
Rename
Delete
aspnet_client
-
Directory
Rename
Delete
CompanyImage
-
Directory
Rename
Delete
TJGS_USA
-
Directory
Rename
Delete
zhijian
-
Directory
Rename
Delete
Memo.inc
0 bytes
.inc
Edit
Rename
Delete
web.config
213 bytes
.config
Edit
Rename
Delete
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode. $ PE L m�� � " 0 0 �N ` � r� `� �N O ` ` � �M 8 H .text �. 0 `.rsrc ` ` 2 @ @.reloc � 8 @ B �N H - D `M � B b b`b``* 0 h ~ & �~ ~ ( %( 3 r p( ( ( s z%~ ( ,r7 pr] p( s z*0 ' ( 3 ro p( ( ( s z* 0 ( ( ( X( * 0 8 o o o ( j ( ( nZX ( X( *0 � � ( ( 4r� pr� ps z� ( {U 3&{[ � � ( r p( ( {U -&{Z � � ( r p( ( * 0 � � ( ( 4r pr� ps z� ( ( � {U -0 � ( r p( � ( ( � }Z {U 30 � ( r p( � ( ( � }[ * 0 B � ( r� p( ( {] � ( ( ZX4r� pr� ps z{\ ( � ( r p( {] ( {\ 3({_ � � ( r p( ( +.{\ -&{^ � � ( r p( ( � ( r� p( ( Y +I{` � }Y � ( r� p( ( � ( ( YX {] 7�* 0 � � ( }\ � ( r p( ( }] � ( r� p( ( {] � ( ( ZX4r' pr� ps z{\ -2 � ( r p( � ( ( � }^ +9{\ 30 � ( r p( � ( ( � }_ {\ -{] - }\ {] � }` � ( r� p( ( Y +?{` � ( r� p( ( � � ( ( YX {] 7�* 0 � � ( r� p( ( {d X4r� pr� ps z� ( r. p( {a ( � ( r> p( {b ( � ( rH p( {c ( � ( r\ p( {d ( {d 6"� ( r� p( {d (! * 0 q ~ ( ~< ~ ~ ~ ( -#r� pr� p( ( (" s z�&�~ (# ,( �* PX S[ 0 � ~ ~ � ( � &ݥ � ( ( ($ ~8 ~ ~ ( -$r� pr� p( ( (" s z� ( ( � {E �*&�~ (# ,(% ~ (# ,( �** ( �� �� ' 0 ~ � ~ ( 8� � ( r� p( ( � ( ( ZX ($ ~: ~ ~ ( -8( � . z3Z+)r� prb p(& (" s z ( (% ~ 9U����,&�~ (# ,(% ~ (# ,( �* �� �� ) 0 � ~ ~ ( � ( r� p( ( � ( ( {` �iZX ($ ( ~; ~ ~ ( -$r� pr� p( ( (" s z�*&�~ (# ,(% ~ (# ,( �* �� �� ' 0 � ~ ~ ( {b ($ {b ( ~9 {b ~ ~ ( -#r� pr& p( ( (" s z�*&�~ (# ,(% ~ (# ,( �* iu lx ' 0 M � � ( ( }a � ( ( }b }c }d ( * 0 M � � ( ( }a � ( ( }b }c }d ( * 0 M � � ( ( }a � ( ( }b }c }d ( * 0 � l�� �" �@ � X � � � { � � s' �1 c�S �� � � � � � � � s( �2 - ( �7 - ! ( �8 - t ( �9 ( �: ( �; p ( �< *BSJB v4.0.30319 l $ #~ � � #Strings \ � #US � #GUID � P #Blob W= �3 e 6 ( 1 � A, �, �� L � � aK zK �K $K �K K � 9 \ 2 � � 3 �� Y K � � & Jg5 3g5 �g5 � ) g9 ! � E = ] E @ � E G � E I u E M r E Q � E U A E \ � E a �DV�Q GV�iGV�bGV��GV� GV��GV�aGV��GV�l GV�hGV�� GV��GV�GV��GV��GV��GV� GV�GV�SGV�� GV�y G�KV�Q NV� NV�) NV�? NV�y N�KV�m RV�F RV�u RV�?KV� KV� KV�.KV�\ KV�OKV�`KV��KV�? KV�� KV�L KV�� KV�� KV�=KV��KV�/ K V � VV�z KV�� KV�� KV�� K �K vK WK �K �K #K 'K q K ~ K +K �K � K 'K q K 3V ~ K �K "K �V � Z EZ 4 K <] � ` |` � K <V V z Zc �R Z RZ ~ K �` m f F j �R 7 K m n F r � v +K �K AN �K � K � � �{ � � �! � � �� P � q � d � b� � � N� ! � � � 4! � } � x! � �� " � ��! �" � �# $ � 7�& �% � ��( �& � m�, 4' � 0�- 8( � J �. l) � Y �/ X* � ��1 + � ��4 |+ � ��5 �+ � ��6 4, �� �7 � � � p f [ � � Z } � � � � # ' ] G � : Z � � � � � � � c � � h � � o � � : : : : h : o � : : : � � � ) � 1 � 9 � A � I � Q � Y � a � � h � ! � � & � 1* � � . � � � � 4 � � : � E � L � Q � >[ � a � Ra � f � �l � � s � � y � �� � � � ! � � � � � � � � 4 � n� � {� � 1* y � � y � � � � � � � � � $ � ( � , � 0 � 4 � 8 � < � @ � D H L P T X ` � d � h � l � p � x � | � � � � � � � � � � � � � � � � � � � � � # � � � � � � � ( � - � 2 � 7 � < � � � �. . . +. # 4. + T. 3 Z. ; �. C �. K �. S �. [ G� A M N O P Q R S ( T U V W X Y Z [ \ ] ^ _ 0 ` a b c d e A V � � � � � � � � � �@ � � @ � � g � UInt32 ReadInt32 WriteInt32 IEEE1394 <Module> ERROR_MORE_DATA GENERIC_READ FILE_SHARE_READ METHOD_BUFFERED RAID CTL_CODE IOCTL_STORAGE_BASE IOCTL_DISK_BASE IOCTL_PARTMGR_BASE GENERIC_WRITE FILE_SHARE_WRITE OPEN_EXISTING GUID_DEVINTERFACE_DISK FILE_DEVICE_DISK GUID_DEVINTERFACE_HIDDEN_DISK IOCTL_DISK_REAUCTION_DISK FILE_ATTRIBUTE_NORMAL SCM IOCTL_STORAGE_DATA_COLLECTION PARTITION_INFORMATION_MBR DRIVE_LAYOUT_INFORMATION_MBR STORAGE_DEVICE_NUMBER IOCTL_STORAGE_GET_DEVICE_NUMBER ERROR_INSUFFICIENT_BUFFER METHOD_NEITHER FILE_READ_ACCESS FILE_WRITE_ACCESS FILE_BOTH_ACCESS FILE_ANY_ACCESS METHOD_IN_DIRECT METHOD_OUT_DIRECT PARTITION_INFORMATION_GPT DRIVE_LAYOUT_INFORMATION_GPT Marshal_STORAGE_DATA_COLLECTION_INPUT Marshal_PARTITION_INFORMATION_EX Unmarshal_PARTITION_INFORMATION_EX Marshal_DRIVE_LAYOUT_INFORMATION_EX Unmarshal_DRIVE_LAYOUT_INFORMATION_EX STORAGE_DEVICE_NUMBER_EX IOCTL_STORAGE_GET_DEVICE_NUMBER_EX IOCTL_DISK_GET_DRIVE_LAYOUT_EX IOCTL_DISK_SET_DRIVE_LAYOUT_EX value__ Ssa Ata Sata mscorlib Usb Mmc DiskId PartitionId Sd lpBytesReturned lpOverlapped GetDeviceGuid GetField Method CloseDevice hDevice OpenDevice ReauctionDevice dwIoControlCode dwShareMode RuntimeTypeHandle CloseHandle GetTypeFromHandle CreateFile hTemplateFile PartitionStyle fieldName lpFileName PartitionName Nvme get_FieldType DeviceType ValueType PartitionType BusType GetElementType Fibre Microsoft.Windows.Storage.Core Signature PtrToStructure parentStructure DebuggableAttribute ComVisibleAttribute AssemblyKeyFileAttribute TargetFrameworkAttribute AssemblyDelaySignAttribute AssemblyFileVersionAttribute CompilationRelaxationsAttribute AssemblyProductAttribute AssemblyCopyrightAttribute AssemblyCompanyAttribute RuntimeCompatibilityAttribute nInBufferSize nOutBufferSize AdditionalParametersSize size SizeOf OffsetOf System.Runtime.Versioning ToString devicePath UsableLength PartitionLength Atapi iScsi AllocHGlobal FreeHGlobal Marshal FileBackedVirtual System.ComponentModel kernel32.dll Microsoft.Windows.Storage.Core.dll DeviceIoControl SendStorageDataCollectionIoctl System Enum Checksum Version DataCollectionOperation System.Reflection Function dwCreationDisposition RecognizedPartition RewritePartition Win32Exception ArgumentException EnableStorageIoDistribution DisableStorageIoDistribution LogStorageIoDistribution EnableIoDistribution DisableIoDistribution LogIoDistribution Unknown FieldInfo info Zero Mbr DeviceNumber PartitionNumber lpInBuffer lpOutBuffer buffer GetLastWin32Error BootIndicator .ctor .cctor StructureToPtr IntPtr Sas System.Diagnostics Spaces System.Runtime.InteropServices System.Runtime.CompilerServices DebuggingModes dwFlagsAndAttributes lpSecurityAttributes Ufs Flags AdditionalParameters additionalParameters HiddenSectors dwDesiredAccess Concat hObject ComputeFieldOffset StartingUsableOffset StartingOffset op_Explicit DeviceMgmt MaxPartitionCount Gpt GetDriveLayout SetDriveLayout layout input Raw Max ComputeFieldOffsetAtIndex index Copy PartitionEntry op_Equality op_Inequality 5C r e a t e F i l e f a i l e d , s t a t u s %D e v i c e h a n d l e t o ' ' i s N U L L ;C l o s e H a n d l e ( ) f a i l e d , s t a t u s II n s u f f i c i e n t b u f f e r t o m a r s h a l i n f o . b u f f e r G p t M b r I n s u f f i c i e n t b u f f e r s i z e t o u n m a r s h a l P A R T I T I O N _ I N F O R M A T I O N _ E X . P a r t i t i o n E n t r y WI n s u f f i c i e n t b u f f e r s i z e t o m a r s h a l l a y o u t . P a r t i t i o n C o u n t ��I n s u f f i c i e n t b u f f e r s i z e t o u n m a r s h a l D R I V E _ L A Y O U T _ I N F O R M A T I O N _ E X . )A d d i t i o n a l P a r a m e t e r s UI n s u f f i c i e n t b u f f e r s i z e t o m a r s h a l i n p u t . V e r s i o n S i z e O p e r a t i o n 1A d d i t i o n a l P a r a m e t e r s S i z e D e v i c e ' W' f a i l e d I O C T L _ D I S K _ R E A U C T I O N _ D I S K , s t a t u s i' f a i l e d I O C T L _ S T O R A G E _ G E T _ D E V I C E _ N U M B E R _ E X , s t a t u s a' f a i l e d I O C T L _ D I S K _ G E T _ D R I V E _ L A Y O U T _ E X , s t a t u s a' f a i l e d I O C T L _ D I S K _ S E T _ D R I V E _ L A Y O U T _ E X , s t a t u s _' f a i l e d I O C T L _ S T O R A G E _ D A T A _ C O L L E C T I O N , s t a t u s �=Ρ�"J��R���J� A ] A A Aa 0 A 0 4 = = 4 8 �z\V4��� $ � � $ RSA1 ����g� w:�މ8� ��e� `Y>�Ēe ���?�?�1� �3��`!g-��1��� �/%�}�o��Y���5�L9�EC��;�&=�����o���GP�\d��E��k*+G��e+��]� � @� z � - p $ = (, $ 0 A A 0 0 4 4 8 = 4 4 8 TWrapNonExceptionThrows .NETFramework,Version=v4.5 / *Microsoft (R) Windows (R) Operating System > 9Copyright (c) Microsoft Corporation. All rights reserved. Microsoft Corporation 10.0.10011.16384 L Gd:\os\public\x86fre\onecoreuap\internal\strongnamekeys\fake\windows.snk �3 Oڱ�h ] Я��u�.��LYk��'��3+��"cS���a-~ A�� ��w��]=Uf ��x�]����p/ �+g6�� RDC1Yc4�ѷ�-���ㆂ�~��p��o���V�>p"L��b^烳� Y_|� ; N 0 RSDS�X��K�$�>t�0V Microsoft.Windows.Storage.Core.pdb �N �N �N _CorDllMain mscoree.dll �% � 0 � H X` �4 V S _ V E R S I O N _ I N F O ��� |O |O? D V a r F i l e I n f o $ T r a n s l a t i o n �R S t r i n g F i l e I n f o . 0 0 0 0 0 4 b 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n , F i l e D e s c r i p t i o n : F i l e V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 1 f # I n t e r n a l N a m e M i c r o s o f t . W i n d o w s . S t o r a g e . C o r e . d l l � : L e g a l C o p y r i g h t C o p y r i g h t ( c ) M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . n # O r i g i n a l F i l e n a m e M i c r o s o f t . W i n d o w s . S t o r a g e . C o r e . d l l v + P r o d u c t N a m e M i c r o s o f t ( R ) W i n d o w s ( R ) O p e r a t i n g S y s t e m > P r o d u c t V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 1 : A s s e m b l y V e r s i o n 1 0 . 0 . 0 . 0 @ �>