IOC Report
d3ca1c9cdcf0f664f4c4b469ce935febb6d974693647c.exe

C:\Program Files (x86)\Mozilla Maintenance Service\logs\79ebd4b63302a4

ASCII text, with very long lines (898), with no line terminators

dropped

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Extensible storage engine DataBase, version 0x620, checksum 0x74ad5aab, page size 16384, DirtyShutdown, Windows version 10.0

dropped

C:\Recovery\24dbde2999530e

ASCII text, with very long lines (680), with no line terminators

dropped

C:\Recovery\79ebd4b63302a4

ASCII text, with very long lines (630), with no line terminators

dropped

C:\Recovery\JFQmuJhhcOwSgqtZoqXNEERKgQYwL.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Users\Public\Videos\79ebd4b63302a4

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\JFQmuJhhcOwSgqtZoqXNEERKgQYwL.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\WmiPrvSE.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\smartscreen.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

data

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

data

modified

C:\Users\user\AppData\Local\Temp\0L4O4hE8bk

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\2T5y90L7U1

SQLite 3.x database, last written using SQLite version 3039003, file counter 3, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\3ZKW2VgUXF

SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\6OUT67hm4H

SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7

dropped

C:\Users\user\AppData\Local\Temp\J4cfRhQZaM

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\PuOdCpi2kH

SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4

dropped

C:\Users\user\AppData\Local\Temp\YtBWM7vFD0

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8

dropped

C:\Users\user\AppData\Local\Temp\ZQ41MPITjV

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_02g3h04h.sk2.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0y5s0oav.fnm.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_12jfnl1l.tez.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_14tfo2uk.lfq.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1hqotscj.xit.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_22aojx0j.bhc.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_23tgjldy.jeg.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2gunwnmh.qab.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2lx4n3ii.y4v.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3n5wr15n.vbe.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3v2pzawg.lix.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4qovhmoz.iv4.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4t3z00dg.sky.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4u1jcqp5.f2b.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4upwjdem.y4q.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5cqc3rrt.qni.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_5cz4qiv4.jva.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_a2uvxrdo.k3c.psm1

ASCII text, with no line terminators

dropped