IOC Report
7jBzTH9FXQ.exe

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Certificate, Version=3

dropped

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

data

dropped

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

data

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\flags32[1]

PNG image data, 32 x 7904, 8-bit colormap, non-interlaced

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\icomoon[1]

Embedded OpenType (EOT), icomoon family

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\main[1]

HTML document, ASCII text, with very long lines (35110)

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\speed-boost-button-1-month[1]

PNG image data, 388 x 404, 8-bit colormap, non-interlaced

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\logo[1]

PNG image data, 200 x 200, 8-bit colormap, non-interlaced

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\psicash_coin[1]

PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\rocket[1]

PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced

dropped

C:\Users\user\AppData\Local\Temp\psiphon-tunnel-core.exe

C:\Users\user\AppData\Local\Temp\psiphon-tunnel-core.exe --config "C:\Users\user\AppData\Local\Psiphon3\psiphon.config" --serverList "C:\Users\user\AppData\Local\Psiphon3\server_list.dat"

C:\Windows\System32\conhost.exe

C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

http://www.e-me.lv/repository0

unknown

https://psiphon3.com/faq.html#clear-windows-data

unknown

http://www.acabogacia.org/doc0

unknown

https://s3.amazonaws.com/psiphon/web/mjr4-p23r-puwl/faq.html

unknown

https://s3.amazonaws.com/psiphon/web/mjr4-p23r-puwl/faq.htmlL

unknown

https://psiphon3.com/faq.html#clearodaltran

unknown

http://crl.dhimyotis.com/certignarootca.crl0

unknown

http://jqueryui.com

unknown

http://www.chambersign.org1

unknown

https://psiphon3.com/fr/faq.html#clear-windows-data

unknown