Grhelp - Exfiltration

Description

The attacker appears to have successfully exfiltrated the backupfiler machine. Can you identify:

• the tool used to exfiltrate the data
• the absolute path of the exfiltrated file
• the time the data was prepared for exfiltration (YYYY-MM-DDTHH:MM:SS in UTC)?

The flag is the concatenation of the three responses: FCSC{tool-filepath-YYYY-MM-DDTHH:MM:SS}