IOC Report
62b1bf60394248d2c743ec6df0935d58e5009c9e04aab.exe

C:\Program Files (x86)\Java\jre-1.8\ea1d8f6d871115

ASCII text, with no line terminators

dropped

C:\Program Files (x86)\Microsoft\Edge\Application\CSC76655AD3B5B14A58A99CB3ECAE1D1A90.TMP

MSVC .res

dropped

C:\Program Files\7-Zip\Lang\ea1d8f6d871115

ASCII text, with very long lines (910), with no line terminators

dropped

C:\Program Files\7-Zip\Lang\upfc.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\ProgramData\Microsoft\Windows\Start Menu\55b276f4edf653

ASCII text, with no line terminators

dropped

C:\Recovery\b83e72d5c7bd2d

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\StartMenuExperienceHost.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\llflCdrMcgGB.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\upfc.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Temp\9xoH1rvGc8

SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\EERJVmti7C

SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\FPVtplfwjV

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\G1fqHlPR84

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\GuaAEdheNO

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\Ld3wQv6XcO

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\Lf13SaWgTu

SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4

dropped

C:\Users\user\AppData\Local\Temp\Lz8GlOhUbo

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\RESD41E.tmp

Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x6cc, 10 symbols, created Wed Jul 3 15:44:08 2024, 1st section name ".debug$S"

dropped

C:\Users\user\AppData\Local\Temp\RESD631.tmp

Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x6e4, 10 symbols, created Wed Jul 3 15:44:09 2024, 1st section name ".debug$S"

dropped

C:\Users\user\AppData\Local\Temp\RQxNQiaB3w

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\S4JgYSVqKb

SQLite 3.x database, last written using SQLite version 3039003, file counter 3, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\Ul0yixeSy1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\XRbfGtKxff

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\k1wttop3\k1wttop3.0.cs

C++ source, Unicode text, UTF-8 (with BOM) text

dropped

C:\Users\user\AppData\Local\Temp\k1wttop3\k1wttop3.cmdline

Unicode text, UTF-8 (with BOM) text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\k1wttop3\k1wttop3.out

Unicode text, UTF-8 (with BOM) text, with very long lines (327), with CRLF, CR line terminators

modified

C:\Users\user\AppData\Local\Temp\pb5w2chy\pb5w2chy.0.cs

C++ source, Unicode text, UTF-8 (with BOM) text

dropped

C:\Users\user\AppData\Local\Temp\pb5w2chy\pb5w2chy.out

Unicode text, UTF-8 (with BOM) text, with very long lines (342), with CRLF, CR line terminators

modified

C:\Users\user\AppData\Local\Temp\qZrUVSx8Oj

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7

dropped

C:\Users\user\AppData\Local\Temp\tfVhKC50lX.bat

DOS batch file, ASCII text, with CRLF line terminators

modified

C:\Users\user\AppData\Local\Temp\vbwUCvifDl

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7

dropped

C:\Users\user\AppData\Local\Temp\yc70I5nJH6

SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7

dropped

C:\Users\user\Desktop\c397ed2d1437c4

ASCII text, with very long lines (652), with no line terminators

dropped

C:\Windows\BitLockerDiscoveryVolumeContents\b83e72d5c7bd2d

ASCII text, with very long lines (415), with no line terminators

dropped

C:\Windows\BitLockerDiscoveryVolumeContents\llflCdrMcgGB.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Windows\System32\CSC9D0BE8EB87641DFA2B4851BB05AFB2.TMP

MSVC .res

dropped

\Device\Null

ASCII text

dropped