Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0
Server: Microsoft-IIS/10.0
User: buyyou
Directory: C:\Users\Default\
Name Size Type Actions
3D Objects-DirectoryRename Delete
AppData-DirectoryRename Delete
Application Data-DirectoryRename Delete
Contacts-DirectoryRename Delete
Cookies-DirectoryRename Delete
Desktop-DirectoryRename Delete
Documents-DirectoryRename Delete
Downloads-DirectoryRename Delete
Favorites-DirectoryRename Delete
Links-DirectoryRename Delete
Local Settings-DirectoryRename Delete
Music-DirectoryRename Delete
My Documents-DirectoryRename Delete
NetHood-DirectoryRename Delete
Pictures-DirectoryRename Delete
PrintHood-DirectoryRename Delete
Recent-DirectoryRename Delete
Saved Games-DirectoryRename Delete
Searches-DirectoryRename Delete
SendTo-DirectoryRename Delete
Templates-DirectoryRename Delete
Videos-DirectoryRename Delete
「开始」菜单-DirectoryRename Delete
NTUSER.DAT786432 bytes.DATEdit Rename Delete
NTUSER.DAT.LOG194208 bytes.LOG1Edit Rename Delete
NTUSER.DAT.LOG20 bytes.LOG2Edit Rename Delete
NTUSER.DAT{b4715d88-715d-11ef-af3a-f21f96b049a0}.TM.blf65536 bytes.blfEdit Rename Delete
NTUSER.DAT{b4715d88-715d-11ef-af3a-f21f96b049a0}.TMContainer00000000000000000001.regtrans-ms524288 bytes.regtrans-msEdit Rename Delete
NTUSER.DAT{b4715d88-715d-11ef-af3a-f21f96b049a0}.TMContainer00000000000000000002.regtrans-ms524288 bytes.regtrans-msEdit Rename Delete
NTUSER.DAT{c76cbcdb-afc9-11eb-8234-000d3aa6d50e}.TM.blf65536 bytes.blfEdit Rename Delete
NTUSER.DAT{c76cbcdb-afc9-11eb-8234-000d3aa6d50e}.TMContainer00000000000000000001.regtrans-ms524288 bytes.regtrans-msEdit Rename Delete
NTUSER.DAT{c76cbcdb-afc9-11eb-8234-000d3aa6d50e}.TMContainer00000000000000000002.regtrans-ms524288 bytes.regtrans-msEdit Rename Delete
ntuser.ini20 bytes.iniEdit Rename Delete

Rename: Default