FM Shell v3
| user: iis apppool\cms1 | host: TEST-IIS | ps: 5.1.14393.3053 | pid: 9336
cwd:
C:\Windows\System32\Microsoft
[..]
go
mkdir
run
upload
deleted: C:\Windows\ShellExperiences\BatteryFlyoutExperience.dll
name
size
mtime
actions
[D] Crypto
-
2016-09-12 17:04
del
ren
[D] Protect
-
2016-09-12 17:03
del
ren