Webshell Akmal archtte id
System:
Microsoft Windows NT 10.0.20348.0
Server:
Microsoft-IIS/10.0
User:
buyyou
Directory:
C:
\
MyData
\
WWW
\
asc365
\
Name
Size
Type
Actions
ASC365_CANADA
-
Directory
Rename
Delete
ASC365_Store01
-
Directory
Rename
Delete
aspnet_client
-
Directory
Rename
Delete
CompanyImage
-
Directory
Rename
Delete
TJGS_USA
-
Directory
Rename
Delete
zhijian
-
Directory
Rename
Delete
Memo.inc
0 bytes
.inc
Edit
Rename
Delete
web.config
213 bytes
.config
Edit
Rename
Delete
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode. $ � �M�d�M�d�M�d���e�O�d�D���R�d�M�e� �d���`�J�d���d�L�d���l�I�d�����L�d���f�L�d�RichM�d� PE L ��� � ! p ` �� @E ` � �0 � @ P � l T X � 0 � .text `.data � @ �.idata N 0 @ @.rsrc @ @ @.reloc � P " @ B p � <# J r@ � �0 u � � � � p P ������������ h 2 | FE H H ! � �p h 0� @ @ FE �H �p h 0� 8 4 DA �! * p D �t���J�^ �m�� ]��� ��� +H` + ) 0 ��N \[ [ L ��[�% %\ \[+ �� 0 � � � ~ h �% %\ [ K\F\ ��[\[ @ K\HI ��[L ��[ K\F\ (�F\ ��F\ ��[[ � @ [ � + �� 0 2 V n � �� � m � L ��\[ � 4 � � L ��L ��\[ � � L ��>\[ � � � � � L ��L ��L ��\[\ L �[ V [ K\F\ ��[[ � K\HI ��[\[ K\F\ ��[\[ p [ L ��\[� [� L ��6\[ ��! @ ���� L ��\[ K\F\ ��[L ��[�% %\< 6L �L �L �\[ ��! @ ���� L ��\[$ K\F\ ��F\ ��F\ ��[L ��L ��\[�� 0� 0� + ) 0 6��� 0� >� d a b r p c n c a l r p c [�b���=uވ ��� ��� # X X ��� t | | ��� $ � � � � � @ , P @ ����n Q}�v��= Microsoft.Windows.DesktopActivityBroker sPOω�G�����v� RSDST���٥�� �61�ww dabapi.pdb GCTL .rdata$brc , .gfids @ � .rdata � H .rdata$voltmd P .rdata$zETW2 X � .rdata$zzzdbg @ .text$mn ` � .edata .data$brc .data � .bss 0 � .idata$5 �0 .00cfg �0 � .idata$2 X1 .idata$3 l1 � .idata$4 �1 V .idata$6 @ � .rsrc$01 �@ p .rsrc$02 T���٥�� �61�ww|K��k �!>s����� ��������̋�U���4� 3ʼnE�SVW3�f�E� �E�]�PSh< ShL S���]�]�]�]�� 0 ����� �E�P�u��0 ��E�P�0 ��ud�E�FPSSSSSSSjV�E�P�|0 ��u � 0 ���=jX�ẺE؋E�E�E�PVSj jS�u�uЉu��0 �u���x0 ��u�E��M���_^3�[� �������̋�U��QQ�e� �M�V�������u.�u�E�u�E��E�P�u �u�u�hR h � 0 �� ��}� t �E�P�0 ��^�� ����������������̋�U��Q�e� �} ujX� �E�P�u �uh� h � 0 ���� ���������̋�U��} ujX��u �uh� h � 0 ��]� ������������������̋�U��M� ]� �����̋�U��j j�EPj h\ j+�u �u��0 �� ]� �����̋�U��Q�@# j j�E��E�Pj h\ j+�u �u��0 �� �� �����̋�Vj j h ht# ���d0 ��u^�Vj�5@# �00 ���uj�(0 ��^������̅�tQj �5@# �40 ��������̋�U��M����]� ��������������̋�V3�F�80 �@# ��u*� 0 3�� �� t4�A t.P�q�q������ � �� t�A t Q�q�q�������^� ����������̋�U��} u�u�@0 �# 3�@]� ������; u� � �����̋�U����e� �e� � V�N�@���t;�uU�E�P�l0 �E�3E�E��T0 1E��L0 1E��p0 3E��M�3��E��E�P�\0 �E�3E�M�3�u�Ή �щ ^�������̋�U���$ � ! � ! �! � ! �5! �= ! f�8! f� ,! f� ! f�! f�% ! f�-� ��0! �p �E�(! �E���4! �E�@��$! �(! �, � ��$ �0 jXk� ǀ4 � �E�� �E�j � 0 h �$0 jXk� DŽ���� h ��P0 P�H0 ���������������������� ������������� ��� � � � � � � � � � DABAPI.dll DabApiBufferFree DabGetLastScheduledRunTime DabRegisterTriggerConsumer DabUnregisterTriggerConsumer ��DN�@� �1 �2 2 42 P2 l2 d3 ~2 H3 �4 �4 �4 �4 �2 �3 3 �3 �2 �2 �4 3 83 2 �2 25 P l1 �3 0 �1 �3 x0 �1 �3 0 �1 4 @0 �1 .4 \0 �1 R4 H0 �1 |4 l0 �1 �4 d0 �1 5 00 �1 D5 �0 �1 �2 2 42 P2 l2 d3 ~2 H3 �4 �4 �4 �4 �2 �3 3 �3 �2 �2 �4 3 83 2 �2 25 � NdrClientCall4 . FreeSid qRpcBindingFromStringBindingW RpcStringBindingComposeW �RpcBindingSetAuthInfoExW RpcStringFreeW GetLastError AllocateAndInitializeSid oRpcBindingFree DisableThreadLibraryCalls QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess T TerminateProcess RPCRT4.dll api-ms-win-security-base-l1-1-0.dll api-ms-win-core-errorhandling-l1-1-0.dll api-ms-win-core-libraryloader-l1-2-0.dll api-ms-win-core-profile-l1-1-0.dll api-ms-win-core-processthreads-l1-1-0.dll api-ms-win-core-sysinfo-l1-1-0.dll InitOnceExecuteOnce HeapFree SetLastError HeapAlloc GetProcessHeap api-ms-win-core-synch-l1-2-0.dll api-ms-win-core-heap-l1-1-0.dll T EtwTraceMessage ntdll.dll � � � 8 � P � h � � � XD � �@ � M U I �4 V S _ V E R S I O N _ I N F O ��� |O |O? � S t r i n g F i l e I n f o � 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n ` F i l e D e s c r i p t i o n D e s k t o p A c t i v i t y B r o k e r A P I h $ F i l e V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) 6 I n t e r n a l N a m e d a b a p i . d l l � . L e g a l C o p y r i g h t � M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . > O r i g i n a l F i l e n a m e d a b a p i . d l l j % P r o d u c t N a m e M i c r o s o f t � W i n d o w s � O p e r a t i n g S y s t e m > P r o d u c t V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n � ����� ���F)���.w CR���g��?�|��_��J � � � � � M U I M U I e n - U S � 000 000(0<0�0�0�0�029O9U9j9�9�9�9�9�9�9D:I:O:d:�:�:�:�:�:�:';5;M;_;m;�;�;�;�;�;�;�;�;< << <%<A<G<�<�<�<�<�<�<�< =!=)=B=H=N=T=Z=`=g=n=u=|=�=�=�=�=�=�=�=�=�=�=�=�=�=�=�= >>>0>7> 0 0 �0