Webshell Akmal archtte id

System: Microsoft Windows NT 10.0.20348.0
Server: Microsoft-IIS/10.0
User: buyyou
Directory: C:\Windows\SoftwareDistribution\
Name Size Type Actions
DataStore-DirectoryRename Delete
Download-DirectoryRename Delete
EventCache.v2-DirectoryRename Delete
PostRebootEventCache.V2-DirectoryRename Delete
SLS-DirectoryRename Delete
ReportingEvents.log574784 bytes.logEdit Rename Delete

Rename: SoftwareDistribution