IOC Report
bZPAo2e2Pv.jar

C:\ProgramData\Oracle\Java\.oracle_jre_usage\b5820291038aa69c.timestamp

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\179605.zip

Zip archive data, at least v2.0 to extract, compression method=deflate

dropped

C:\Users\user\AppData\Local\Microsoft\179605\Browsers\Chrome\Default\cookie.txt (copy)

ASCII text

dropped

C:\Users\user\AppData\Local\Microsoft\179605\Game\craftrise.txt

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\179605\Game\sonoyuncu.txt

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\179605\screenshot.png

PNG image data, 1280 x 1024, 8-bit/color RGB, non-interlaced

dropped

C:\Users\user\AppData\Local\Microsoft\cookies.txt

ASCII text

dropped

C:\Users\user\AppData\Local\Temp\edge_tempfile.db

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 7, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 7

dropped

C:\Users\user\AppData\Local\Temp\hsperfdata_user\6880

data

dropped

C:\Users\user\AppData\Local\Temp\jna-92896885\jna3139189163944155017.dll

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

dropped

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Program Files (x86)\Java\jre-1.8\bin\java.exe" -javaagent:"C:\Users\user\AppData\Local\Temp\jartracer.jar" -jar "C:\Users\user\Desktop\bZPAo2e2Pv.jar"" >> C:\cmdlinestart.log 2>&1

C:\Windows\System32\conhost.exe

C:\Windows\system32\conhost.exe 0xffffffff -ForceV1