Hacked By AnonymousFox
| Current Path : C:/Windows/System32/ |
|
|
| Current File : C:/Windows/System32/RdpSaProxy.exe |
MZ @ !L!This program cannot be run in DOS mode.
$ Iͯ
ģ
ģ
ģ0ģhģhģhģh ģ
Ģģh ģh\ ģh ģRich
ģ PE L QP`
< " D P @
@ a p @ T ` .text : < `.data < P @ @ .idata f
` B @ @.rsrc p
N @ @.reloc X @ B P@ P@ $@ #@ #@ 0$@ p$@ $@ $@ @$@ p$@ $@ $@ @ @ P @ ` @ !@ 0#@ p$@ $@ $@ @ #@ #@ 5@ p$@ $@ $@ %@ #@ #@ 5@ 5@ 5@ @,@ @-@ .@ 0@ p2@ $@ %@ P%@ +@ DP@ @ a@ x@ + u $@ A@ @ @ A@ `E@ P ` ! 0# # # 0$ @$ p$ $ $ $ $ % P% % ) + @, @- . 0 p2 5 5 5 5 A A D 0D E `E F H H J ` ckǁ B%4 K$ h4Ny NULL R d p S e s s i o n A g e n t R d p S e s s i o n A g e n t . 1 . 0 ModifySystemAccessInDacl failed! RestrictProcessDacl failed! CoInitializeEx failed! CoInitializeSecurity failed! COutOfProcFactory::s_StartFactories failed! Advapi32.dll EventActivityIdControl MA&ZGd^!Hj&>8(79 PJXJ hSd'V-\,Gu#NCOutOfProcFactory m_pFactoryData->CreateInstance failed! pNewComponent->QueryInterface failed! CoRegisterClassObject failed! tк <f%`ECRdpSessionAgentProxy R d p S a . e x e CRdpSaComUtils::s_GetKnownFolderFilePath failed! spNewObject->Initialize failed! User not authorized CreateShadowInvitation failed! CoImpersonateClient CRdpSaUtils::s_CheckTokenUser failed! _@*̃;R.{J F FwN]ND.Q{V
4a .A{SHGetKnownFolderPath PathCchCombine |$>U.Uc QP` '
QP`
8
QP` H RSDS%v& RdpSaProxy.pdb GCTL T .rdata$brc T .CRT$XCA X .CRT$XCAA \ .CRT$XCU d .CRT$XCZ h .CRT$XIA l .CRT$XIAA p .CRT$XIY t .CRT$XIZ x .gfids $ .giats 0 p .rdata .rdata$sxdata h .rdata$zzzdbg .text$di 0 0 .text$mn J .text$yd @J | .xdata$x P @ .data$brc @P .data PP .bss ` .idata$5 a .00cfg a .idata$2 Pb .idata$3 db .idata$4 c ~ .idata$6 p .rsrc$01 p @ .rsrc$02 h J@ + YhS@ h`@ ̋Uj jEPjEPQRj+u u `@ (] USVuWtOGu+Gj_u@ j jEPWVjEPSRj+u u `@ 0_^[] ̋UQES3Vu EWttjWXHÊ#u`@ WS`@ WSE `@ UFt Nt^~VF 3_^[] U,SVWj3|$ Y3\$S@ S@ S@ S@ S@ S@ S@ `@ 5 P@ FPSSD$ L$ PjQV\$4h@ N `@ 6uЋ
T@ T@ tRQ\a@ T@ T@ @@ S@ h T@ SShS@ Xa@ uT@ SS@ S@ @ jSS@ S@ @ S@ 0@ S@ S@ @ S@ P@ S@ p@ T@ `@ P@ u< P@ ;t3@ t-xr'`@ PQ YP P@ @ ppj
Yp`@ D$Ph V`@ uN`@ 5 P@ ;G F = ~3 PQy YP P@ @ ppj Y hLP@ h@ yK5 P@ ; F ~ Ph@ P P@ ppj @ Y T$V y=5 P@ ; F ~| Ph4@ P P@ ppj
jSta@ y@5 P@ ;F F < ~2 PhP@ t P P@ ppjWSh SjjSSjS|a@ yK
P@ ; A y Phh@ P P@ ppj@ Y t$l`@ M\$d yG
P@ ;tA tyyrsPh@ P P@ ppj륍D$ P`@ D$ P`@ SSSD$(P`@ uء0P@ tPda@
,P@ tQpa@ ։ ,P@ pa@ 5 P@ 9\$tt$l`@ 5 P@ ;t( F F tv v`@ ^^ 6u= P@ _^3[] UDP@ 3ʼnEVW3E }𫫫EPh@ j t`@ t-h@ ux`@ tEPja@ u|`@ ME3_^I% ]̋UEVu@u P1a@ ^] ̋UEV@Pqa@ ^] ̋UEV@Pqa@ ^] ̋UU V3W@ ;uAuuRu 3@ ;u AuMEQ R#ʉE@ _^] UVF 4@ @ F@ NEF$@ tV Y^] UQh,@ EA X@ AH@ A 4@ ] ̋UQ$$ } S]VWt@ 3ɋ;usAuEpD$ Pu v5T@ a@ P@ = P@ @ x Wh@@ P P@ ppj P@ = P@ @ xr|WQLYP P@ @ ppj
YYD$ uSP1a@ y< P@ = P@ t0@ t*xr$Whh@ P P@ ppj @ YL$ td$ Qpa@ _^[] ̋U} t T@
T@ 3] UQe SVW
T@ 0P@ c # j$ YtKQ3ɍA j ^#tVxa@ ׅ EPjjVsla@ xM s$KP@ v P@ = P@ t0@ t*xr$Wh@ P P@ @ ppjYtPVpa@ > P@ = P@ t-@ t'xr!WQuYP P@ @ ppj
Y_^[]̃UEAA$@ A ͫA @ A@ A I] ̋UMt
3@@3@] UV@ F@ NEF$@ tV
Y^] ̋UW}Ot+Hu GVj0a@ O3^3@_] ̃i̋UVN E$@ tV| Y^] ̋A ̃I 3̃I 3̋UU 3V@ ;u"AuMEQpa@ 3 E @ ^] ̋UEVu@ u P1a@ ^] ̋UEV@ Pqa@ ^] ̋UEV@ Pqa@ ^] ̋UUSV3@ W} ;uAuuWRV @ ;uAuEJQ* @ ;u"AuJٍB#ȋEBP @ _^[] UQQ$$ VW=LP@ p`@ D$Ph V`@ uC`@
P@ P@ t~A txyrrPQ YP P@ @ ppj
YOD$ PW y>
P@ P@ t0A t*yr$Ph@ P P@ @ ppj Y|$ t
t$l`@ _^]ËэJQh@ <3@ B@ t@ B d@ B$B(B,B0B4ËUV EtV Y^] VWS@ V@ G@ Gt@ G d@ d`@ O%T@ V``@ 0 t w0l`@ w4`@ j `@ O$tg$ Qpa@ G@ G @ OG $@ _^ËUT DP@ 3ʼnEVWh j P" j<j P! E G(G,OPX`@ P\`@ u``@ P@ = P@ t-@ t'xr!VQ
YP P@ ppj
@ Y~ @ PQk yM P@ = P@ @ x Vh@ P P@ @ ppjY] PDž< Dž@ `@ uG`@ P@ = P@ 1@ 'x VQYP P@ ppjG0M_3^ ] ̋UQS3VW9] tO P@ = P@ @ x SQYP P@ @ ppjY1 S@ Wd`@ 9 T@ u~j8 Yt VuyE P@ = P@ t0@ t*xr$Sh @ P P@ @ ppjYW``@ '5T@ W``@ T@ MPya@ ׅtV_^[] P@ = P@ t-@ t'xr!SQYP P@ @ ppjY&W``@ ̋UQVjY yB P@ = P@ @ x Vh@@
P P@ ppj E@$uL P@
= P@ @ x VQYP P@ @ ppjYc`u 0uuN uu Pa@ V y< P@ = P@ t0@ t*xr$VhT@ ]P P@ ppj@ Y+^] ̋UQVj9 yM P@ = P@ @ x Vh@@ P P@ @ ppjY E u> P@ j ^= P@ tt@ tnxrhVQYP P@ ppj@ YIEMQ,u5 P@ = P@ t*@ t$xr VQ\YP P@ ppj봉a, ^] ̋USVj9 yM P@ = P@ g @ ] xS Vh@@ P P@ @ ppjY* } uD P@ @ = P@ @ x VQYP P@ ppj u `@ @tD P@ W = P@ @ x VQGYP P@ ppj ]{0 t5 P@ = P@ tt@ tnxrhVQYP P@ ppj Ej@u `@ C0u> P@ = P@ t-@ t'xr!VQYP P@ ppj @ Yb^[] ̋UQSVuW39~0uD P@
= P@ @ x WQ=YP P@ ppj ] uD P@ @ = P@ o @ e x[ WQYP P@ ppj 5 S`@ @tD P@ = P@ @ x WQYP P@ ppj V0ϋ; AuMuD P@ @ = P@ @ x WQ@YP P@ ppj" 9~ t5 P@ = P@ tx@ trxrlWQYP P@ ppj#IN Qpa@ ? P@ = P@ t.@ t(xr"WQY
P@ Pqqj!@ Y[_^[] UQSVW}39w0uD P@
= P@ V @ L xB VQMYP P@ ppj$ ] uD P@ @ = P@ @ x VQYP P@ ppj% S`@ @tD P@ = P@ @ x VQYP P@ ppj& W0;u@Au9w tt P@
= P@ tc@ t]xrWVQbYP P@ ppj(4 P@ = P@ t.@ t(xr"VQ-Y
P@ Pqqj'@ Y_^[] ̃=LP@ t
LP@ 3 USVW3}}}xa@ yM P@ = P@ @ x Vht@ P P@ @ ppj)Yf EPWj[ST`@ P `@ u_`@ P@ = P@ t,X t'xr!VQ:YP P@ ppj*@ Y~ @ EPWWju `@ tN P@ = P@ X x VQYP P@ ppj+@ Y` `@ ztF`@ P@ = P@ [X RxHVQaYP P@ ppj,"uW`@ uC P@ = P@ X x VQYP P@ ppj-LEPuWju `@ uF`@ P@ = P@ X xVQYP P@ ppj.rUEMP y2 P@ = P@ tpX tkxreVh@ fP P@ ppj/?} u y; P@ = P@ t/X t*xr$Vh@@ %P P@ ppj0@ Yha@ tWP`@ } t ul`@ _^[] ̃l$̃ r̃l$&̃l$FU SVW3EPWW}jVى}}}}}} `@ `@ ztG`@ P@ = P@
@ x WQ&YP P@ ppj
uj@`@ EuO P@ = P@ @ x WQYP P@ ppj @ Ys MQuPjV `@ uG`@ P@ = P@ P @ F x< WQiYP P@ ppj EPWEPWWjjSD`@ tG`@ P@ = P@ @ x WQYP P@ ppj
EpE0@`@ VW`@ EuD P@ = P@ @ x WQYP P@ ppjjVP<`@ uG`@ P@ = P@ 0 @ & x WQIYP P@ ppj E0h ju8`@ uG`@ P@ = P@ @ x WQYP P@ ppj M3f;As>EPVQ4`@ MAPQjju0`@ MFA;rWuWWjjS,`@ tW`@ P@ = P@ t-@ t'xr!WQNYP P@ ppj@ Y~ x@ uP`@ uP`@ uP`@ _^[]`@ P@ = P@ t@ txrWQYP P@ ppj`@ P@ = P@ v@ lxbWQYP P@ ppj<USVWU3EMED QVVjPuu `@ `@ zt``@ P@ = P@ t-@ t'xr!VQYP P@ ppj@ Y~ @ { uj@`@ uO P@ = P@ U @ K xA VQYP P@ ppj@ Y= EPuSju `@ uG`@ P@ = P@ R@ Hx>VQ1YP P@ ppjuj@`@ uD P@ = P@ @ x VQYP P@ ppj=EPWVu(`@ uG`@ P@ = P@ @ xVQYP P@ ppjiW3$`@ MSP`@ WP`@ _^[] U SVWjDX3EP}j@u߉}}}`@ EuO P@ = P@ } @ s xi WQYP P@ ppj@ YC MQPWj(`@ u``@ P@ = P@ t-@ t'xr!WQYP P@ ppj@ Y,~ @ EPWEPWWjjVD`@ t8`@ P@ = P@ t@ txrWQYP P@ ppj넋Eup@`@ VW`@ EuD P@ = P@ F @ < x2 WQYP P@ ppj jVP<`@ uG`@ P@ = P@ @ xWQUYP P@ ppj M3f;As[EPVQ4`@ M9 u APu$`@ tEXMAPQjju0`@ tuMFA;r9} uujuH`@ `@ P@ = P@ 0@ &x WQYP P@ ppj `@ P@ = P@ @ xWQ=YP P@ ppj `@ P@ = P@ @ xWQYP P@ ppj hWuWWjju,`@ tG`@ P@ = P@ D@ :x0WQYP P@ ppj!
M uP`@ uP`@ uP`@ _^[] UQV3ɍEPQQh@ M`@ y3 P@ = P@ t@ tyxrsVh @ P P@ ppj
Mh@ uh u `@ y< P@ = P@ t0@ t*xr$Vh@ P P@ ppj (@ Yu`@ ^] UV
u
Ytu Yt^] jhP@ P(a@
0T@
4T@ YYHa@
|P@ 4a@
pP@ =@P@ u h F@ a@ Y 3̡xP@ hlP@ 5tP@ lP@ h`P@ h\P@ hXP@ ,a@ dP@ jXh@J@ i 3ۉ]EP`@ ]d p(T@ 3
t;u3Fh `@ 3F95,T@ u
j Y:9 ,T@ u,5,T@ ht@ hh@ M YYtE 0 5TP@ 95,T@ uhd@ hT@ YY,T@ u 3(T@ =8T@ t#h8T@ YtSjS58T@ a@ ֡ a@ tMj ^Uf;wOftuFftf;w MEtEj
XPQSh @ 0PP@ =hP@ uOP$a@ "u 3ЉUM됋M EQP) YYËeEܣPP@ =hP@ uP a@ =TP@ u a@ PP@ E ËUVu3;u s Wu>t
a@ ׃;u r_^]øMZ f9 @ uU
< @ @ PE uC @ f;t f;u( @ v 39 @ Ãt @ v
39 @ 3P ;
DP@ u jh`J@ e 4T@ Euu5`@ a@ YTj Ye 4T@ E0T@ EEPEPuj u܋M
4T@ M
0T@ E Ëuj, YËUuZYH]%Da@ %@a@ %<a@ ̋UE 8csmu+xu%@= t=!t="t= @u`@ 3] hE@ `@ 3%8a@ j hJ@ 3ɋEtKtFMMZ f9u2P<x+ s#EPE # 3@Ëe3ɉME Uj `@ t PtH\jXf;t
u3@]ËE]%0a@ 3̋UE3SVWH<AYt} p ;r H;r
B(;r3_^[]̋UjhJ@ hH@ d PSVWDP@ 1E3PEd eE h @ z tTE- @ Ph @ Pt:@$ ЃEMd
Y_^[]ËE 3Ɂ8 ËeE3Md
Y_^[]̋UMMZ f9u A<8PE u f9Hu ]3]ËUe e DP@ VWN@ ;tudEP`@ E3EEX`@ 1E`@ 1E`@ 3EM3EEP`@ E3E3E;t5DP@ uO@ȉ
DP@ _HP@ ^]h h a@ YY%La@ hH@ d5 D$l$l$+SVWDP@ 1E3PeuEEEEd ËMd
Y__^[]Q̋Uuuu uh0D@ hDP@ _ ] Uj `@ u`@ h p`@ P`@ ]ËU$ Q@
|Q@ xQ@ tQ@ 5pQ@ =lQ@ fQ@ f
Q@ f hQ@ fdQ@ f%`Q@ f-\Q@ Q@ E Q@ EQ@ EQ@ P@ Q@ P@ P@ P@ P@ jXk ǀP@ jX
DP@ P@ jX
HP@ P@ jXk
DP@ LjX
HP@ Lh @ ]%a@ %a@ % a@ %a@ %Pa@ ̀=T@ t5T@ 5 T@ \a@ 4C@ HC@ D@ E@ E@ G@ G@ P@ @ @ )@ @ @ @ N@D c c d &d <d Rd jd ~d d i i h h h h h h h &i e e e ze `e Fe 2e $e e d d d d d e <i Di Vi ti i i i i i i Hh Dj e f e f fh j .g g
g g f f Bg f Pg f f f f f tf df Vf Jf @f 8f f f \j h h g g g g jg g |g H@ db d ` b e P` 8c ,f ` \c "g ` c g da c 0h Xa c :h ` ,c Zh ` Lc vh ` Tc $j ` c c d &d <d Rd jd ~d d i i h h h h h h h &i e e e ze `e Fe 2e $e e d d d d d e <i Di Vi ti i i i i i i Hh Dj e f e f fh j .g g
g g f f Bg f Pg f f f f f tf df Vf Jf @f 8f f f \j h h g g g g jg g |g (TraceMessage sGetTraceLoggerHandle rGetTraceEnableLevel qGetTraceEnableFlags RegisterTraceGuidsW 5UnregisterTraceGuids OpenProcessToken OpenThreadToken pGetTokenInformation ADVAPI32.dll MHeapSetInformation aGetLastError FreeLibrary GetProcAddress vGetModuleHandleExA GetCurrentProcess CloseHandle dInitializeSRWLock AcquireSRWLockExclusive ReleaseSRWLockExclusive /ProcessIdToSessionId GetCurrentProcessId GetCurrentThread LocalAlloc LocalFree KERNEL32.dll GetMessageW TranslateMessage DispatchMessageW PostQuitMessage USER32.dll free malloc "_callnewh o _XcptFilter __p__commode _amsg_exit __wgetmainargs __set_app_type exit s_exit $_cexit __p__fmode __setusermatherr _initterm _wcmdln `_lock _unlock __dllonexit _onexit msvcrt.dll 5 ?terminate@@YAXXZ 7_controlfp j_except_handler4_common ^ CoInitializeEx _ CoInitializeSecurity CoUninitialize s CoRegisterClassObject CoRevokeClassObject [ CoImpersonateClient ~ CoRevertToSelf ole32.dll = EtwEventUnregister ; EtwEventRegister ntdll.dll OLEAUT32.dll ShellExecuteExW SHELL32.dll A CoTaskMemFree api-ms-win-core-com-l1-1-0.dll cGetSecurityInfo KGetLengthSid InitializeAcl AddAccessDeniedAce 7GetAce AddAce SetSecurityInfo CreateWellKnownSid EqualSid AddAccessAllowedAce }Sleep GetStartupInfoW mSetUnhandledExceptionFilter xGetModuleHandleW MQueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime GetTickCount UnhandledExceptionFilter TerminateProcess PathCchCombine api-ms-win-core-path-l1-1-0.dll aSHGetKnownFolderPath
memset 8 P h 0u p <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<!-- Copyright (c) Microsoft Corporation -->
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3">
<assemblyIdentity
version="5.1.0.0"
processorArchitecture="x86"
name="Microsoft.Windows.TerminalServices.RdpSa"
type="win32"
/>
<description>RDP Session Agent</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"
/>
</requestedPrivileges>
</security>
</trustInfo>
<application xmlns="urn:schemas-microsoft-com:asm.v3">
<windowsSettings>
<disableWindowFiltering xmlns="http://schemas.microsoft.com/SMI/2011/WindowsSettings">true</disableWindowFiltering>
</windowsSettings>
</application>
<asmv3:application>
<asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">
<dpiAware>true</dpiAware>
</asmv3:windowsSettings>
</asmv3:application>
</assembly>
4 V S _ V E R S I O N _ I N F O
cE
cE? S t r i n g F i l e I n f o 0 4 0 9 0 4 B 0 L C o m p a n y N a m e M i c r o s o f t C o r p o r a t i o n X F i l e D e s c r i p t i o n R D P S e s s i o n A g e n t P r o x y h $ F i l e V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 ( W i n B u i l d . 1 6 0 1 0 1 . 0 8 0 0 ) > I n t e r n a l N a m e R d p S a P r o x y . e x e . L e g a l C o p y r i g h t M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . F O r i g i n a l F i l e n a m e R d p S a P r o x y . e x e j % P r o d u c t N a m e M i c r o s o f t W i n d o w s O p e r a t i n g S y s t e m >
P r o d u c t V e r s i o n 1 0 . 0 . 1 7 7 6 3 . 1 D V a r F i l e I n f o $ T r a n s l a t i o n L 000 0000 0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0000000000000000 11X1\1`1l1p19!9'9O99999 :V:\:b:g:m:w:}:::::::::::::::;;;;!;';+;1;5;:;@;D;J;N;T;X;^;e;j;s;;;;;;;;;<<0<R<]<j<<<<<<<=$=.=P=[=h=}==========>> >">2>8>R>d>|>>>>>>> ?6?f????? 00,0?0F0M0z000000001*1/1T1a1f1z111111 22G2c2}22222222233H3\3c33334R444 565f5555"6(6;6E6K6Q6m6r66666666 77
77R7Y7`7g7n7t7~777777777738:8D8K8P8l8y88888829<9C9H9p99999: ::L:Q:e:p:u::::::::::
;8;=;];h;;;;;;;;
<<%<X<]<}<<<<<<<<<=X=]=}========>/>J>T>p>>>>>>??9?R?\?????? 0 0060M0W0s00000001)1B1L1t11111112#2-2I2W2r222222223 33 3!3<3I33333333334,474A4h4444444455-525E5P5]5i5t55 66 6#6(6P6h6t6~6666666
707:7A7F7n77777777 88-8O8Y8`8e88888 99 9(959Z9c9l9{99999999):/:::A:F:b:o::::::;;; ;E;];h;r;;;;;;;
<< <W<c<m<<<<<<<<<5=?=F=K=g==========!>G>d>>>>>>>? ??9?L?S?X???????? @ T 0 0*030>0C0W0b0q000000001$1*111:1@1H1N1[1c1i11111111111111
2 2$2)2.2P2V2]2b2o2~22222223
33O3U3_3e3n3s333333334424C4Q4b4j44444444I5a5g5p5w5566666667777777788$8)8F8888888889 999 9%9,939:9A9H9P9X9`9l9u9z9999999999999: :::":+:1:7:T:X:x::::: P 0000 0 0$0 ` 1
Hacked By AnonymousFox1.0, Coded By AnonymousFox