IOC Report
W4tW72sfAD.exe

C:\Program Files (x86)\Internet Explorer\en-GB\9da3c047e935b1

ASCII text, with very long lines (857), with no line terminators

dropped

C:\Program Files (x86)\Internet Explorer\en-GB\juptXkyeRvGsIZrQGeVEsrnWhD.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Program Files\Microsoft Office 15\ClientX64\9da3c047e935b1

ASCII text, with very long lines (681), with no line terminators

dropped

C:\Program Files\Microsoft Office 15\ClientX64\juptXkyeRvGsIZrQGeVEsrnWhD.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Extensible storage engine DataBase, version 0x620, checksum 0x4bf9faa4, page size 16384, DirtyShutdown, Windows version 10.0

dropped

C:\Recovery\9da3c047e935b1

ASCII text, with no line terminators

dropped

C:\Recovery\juptXkyeRvGsIZrQGeVEsrnWhD.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Users\Default\9da3c047e935b1

ASCII text, with very long lines (704), with no line terminators

dropped

C:\Users\Default\juptXkyeRvGsIZrQGeVEsrnWhD.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Users\Public\Downloads\9e8d7a4ca61bd9

ASCII text, with very long lines (606), with no line terminators

dropped

C:\Users\Public\Downloads\RuntimeBroker.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\RuntimeBroker.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\W4tW72sfAD.exe.log

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\juptXkyeRvGsIZrQGeVEsrnWhD.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

data

dropped

C:\Users\user\AppData\Local\Temp\2057exvhHc

SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\3zUipu98QK

SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2

dropped

C:\Users\user\AppData\Local\Temp\75DJw7GE1X

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\Pb5xjMs33D

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1

dropped

C:\Users\user\AppData\Local\Temp\RESCC57.tmp

Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x6ec, 10 symbols, created Fri Apr 19 12:52:07 2024, 1st section name ".debug$S"

dropped

C:\Users\user\AppData\Local\Temp\XrKvE5hfPM

SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2g2o2osm.o0n.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3bb51dkf.43m.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_452rxwrt.slr.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_fb1b35gc.bgp.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_glqq45wj.e3f.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mlcv2gup.4ee.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mpxfhqb0.p1l.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ndo2rr3d.4oj.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_odq1ty54.v1v.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_p5bczs5f.cf2.psm1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_px3ssoqz.d2i.ps1

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rxgfgttg.q14.ps1

ASCII text, with no line terminators

dropped