IOC Report
wait.dll.exe

C:\Users\user\AppData\Local\Temp\Ajhu3.tmp

data

dropped

C:\Users\user\AppData\Local\Temp\Alakow3.tmp

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\Iyufla1.tmp

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\boiz3.tmp

SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\boiz3.tmp-shm

data

dropped

C:\Users\user\AppData\Local\Temp\ruikcu.tmp

SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4

dropped

C:\Users\user\AppData\Local\Temp\uxax32.tmp

SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7

modified

https://word.office.comon

unknown

https://reateberam.com/test/1303063_94378682313560_2056837URLS1https://dogirafer.com/test/4190877_54

unknown

http://r11.o.lencr.org0

unknown

https://powerpoint.office.comcember

unknown

https://reateberam.com/test/9362058_57969102112118_633157URLS1https://dogirafer.com/test/8477611_767

unknown