FM Shell v3 | user: iis apppool\cms1 | host: TEST-IIS | ps: 5.1.14393.3053 | pid: 9336
cwd: C:\Windows\System32\MSDRM
[..] 
rename: C:\Program Files\Windows Portable Devices
namesizemtimeactions
MsoIrmProtector.doc240642016-07-16 18:48edit get del ren
MsoIrmProtector.ppt87042016-07-16 18:48edit get del ren
MsoIrmProtector.xls138242016-07-16 18:48edit get del ren