IOC Report
gobEmOm5sr.exe

C:\ProgramData\AEGHJEGIEBFIJJKFIIIJ

SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1

dropped

C:\ProgramData\AFHDBGHJKFIDHJJJEBKEBGIEBG

SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3

dropped

C:\ProgramData\AKJDGIEHCAEHIEBFBKKKKFIDBK

SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11

dropped

C:\ProgramData\BFCFBKKKFHCFHJKFIIEH

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\ProgramData\BGDAAKJJ

SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2

dropped

C:\ProgramData\EBAEBFIIECBG\KKKJKE

SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11

dropped

C:\ProgramData\EHDHDHIE

SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2

dropped

C:\ProgramData\EHJDHJKFIECAAKFIJJKJ

ASCII text, with very long lines (1809), with CRLF line terminators

dropped

C:\ProgramData\GDHIIIIEHCFIECAKFHJD

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\ProgramData\HIIIDAKK

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3

dropped

C:\ProgramData\HJDGCGDBGCAAEBFIECGHDGCAAE

SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11

dropped

C:\ProgramData\IJKJDAFHJDHIEBGCFIDBKKFCBA

SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2

dropped

C:\ProgramData\JJJKEHCAKFBFHJKEHCFI

SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1

dropped

C:\ProgramData\KECBFBAE

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3

dropped

C:\ProgramData\Microsoft\Network\Downloader\edb.log

data

dropped

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Extensible storage engine DataBase, version 0x620, checksum 0x21affdae, page size 16384, DirtyShutdown, Windows version 10.0

dropped

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

data

dropped

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_8LEi0YA5qqlYpHd7_f94c499b57e91d3582facb436aa323a8b871b46_1278b98d_a70bfa2d-27da-4935-b504-5a5224f60ae6\Report.wer

Unicode text, UTF-16, little-endian text, with CRLF line terminators

dropped