Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0

Server: Microsoft-IIS/10.0

User: buyyou

Directory: C:\MyData\WWW\asc365\

Name	Size	Type	Actions
ASC365_CANADA	-	Directory	Rename Delete
ASC365_Store01	-	Directory	Rename Delete
aspnet_client	-	Directory	Rename Delete
CompanyImage	-	Directory	Rename Delete
TJGS_USA	-	Directory	Rename Delete
zhijian	-	Directory	Rename Delete
Memo.inc	0 bytes	.inc	Edit Rename Delete
web.config	213 bytes	.config	Edit Rename Delete

[2025-07-20][10:13:02:300][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=17700
[2025-07-20][10:13:02:301][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=18852
[2025-07-20][10:13:02:301][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=20100
[2025-07-20][10:13:02:302][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=7316

[2025-07-20][10:13:02:303][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=5060
[2025-07-20][10:13:02:388][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=14620
[2025-07-20][10:13:02:461][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=16512
[2025-07-20][10:13:02:681][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=11768
[2025-07-20][10:13:02:681][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=14244
[2025-07-20][10:13:02:698][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=13936
[2025-07-20][10:13:02:978][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=19792
[2025-07-20][10:13:02:978][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=10216
[2025-07-20][10:13:02:989][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=4748
[2025-07-20][10:13:03:117][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=12868
[2025-07-20][10:13:03:237][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=8288
[2025-07-20][10:13:03:532][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=21412
[2025-07-20][10:13:03:606][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=7392
[2025-07-20][10:13:03:607][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=2700
[2025-07-20][10:13:03:617][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=6928
[2025-07-20][10:13:03:804][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=12900
[2025-07-20][10:13:04:045][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=15484
[2025-07-20][10:13:04:045][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=532
[2025-07-20][10:13:04:046][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=7472
[2025-07-20][10:13:04:180][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=15752
[2025-07-20][10:13:04:434][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=3036
[2025-07-20][10:13:04:438][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=13404
[2025-07-20][10:13:04:440][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=16224
[2025-07-20][10:13:04:549][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=13268
[2025-07-20][10:13:04:563][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=10000
[2025-07-20][10:13:04:853][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=21024
[2025-07-20][10:13:05:004][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=5660
[2025-07-20][10:13:05:059][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=18916
[2025-07-20][10:13:05:066][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=13484
[2025-07-20][10:13:05:268][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=14076
[2025-07-20][10:13:05:463][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=18352
[2025-07-20][10:13:05:637][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=17000
[2025-07-20][10:13:05:774][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=16752
[2025-07-20][10:13:05:794][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=17156
[2025-07-20][10:13:05:804][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=12176
[2025-07-20][10:13:05:836][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=20252
[2025-07-20][10:13:06:185][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=20120
[2025-07-20][10:13:06:207][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=17708
[2025-07-20][10:13:06:292][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=20372
[2025-07-20][10:13:06:540][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=13104
[2025-07-20][10:13:06:542][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=944
[2025-07-20][10:13:07:194][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=3644
[2025-07-20][10:13:07:233][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=10720
[2025-07-20][10:13:07:340][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=15372
[2025-07-20][10:13:07:442][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=17344
[2025-07-20][10:13:07:539][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=1940
[2025-07-20][10:13:08:959][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=16804
[2025-07-20][10:13:10:361][6524][4188]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=13004
[2025-07-20][10:13:12:049][6524][6336]: [ACTION]<rsbmterm> CProbeWatcher::rac_mon_handler action=11, rule_id=9761, pid=7176