A possibly overlooked GELSEMIUM artefact

https://securelist.com/the-sessionmanager-iis-backdoor/106868/

https://thehackernews.com/2022/07/new-sessionmanager-backdoor-targeting.html

…