fantasygaq.blogg.se

Spawned process "DropboxUpdate.exe" with commandline "/installsource taggedmi /install "appguid="" ( Show Process) Malicious artifacts seen in the context of a contacted host

"DropboxUpdate.exe" wrote 52 bytes to a remote process "C:\Program Files\Dropbox\Update\DropboxUpdate.exe" (Handle: 604) "DropboxUpdate.exe" wrote 32 bytes to a remote process "C:\Program Files\Dropbox\Update\DropboxUpdate.exe" (Handle: 604) "DropboxUpdate.exe" wrote 4 bytes to a remote process "C:\Program Files\Dropbox\Update\DropboxUpdate.exe" (Handle: 604) "DropboxUpdate.exe" wrote 1500 bytes to a remote process "C:\Program Files\Dropbox\Update\DropboxUpdate.exe" (Handle: 604) "" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\GUM3D2A.tmp\DropboxUpdate.exe" (Handle: 132) "" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\GUM3D2A.tmp\DropboxUpdate.exe" (Handle: 132) "" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\GUM3D2A.tmp\DropboxUpdate.exe" (Handle: 132) "" wrote 1500 bytes to a remote process "%TEMP%\GUM3D2A.tmp\DropboxUpdate.exe" (Handle: 132)