Date Manager and PrecisionTime share a registry structure with distinct settings
Sandbox reports show both applications recording product-specific settings and paths to their respective executables under a common Gator.com registry structure. The entries support a shared local configuration scheme, but do not demonstrate a restart or link either file to date-manager.com.
In separate sandbox reports, Date Manager and PrecisionTime recorded their executable locations under the same Gator.com registry structure. Each used a product-specific branch with entries named event, lockfiles and restart. The paths pointed back to the executables represented in the respective reports. What does that establish: a shared application-management mechanism, automatic persistence, or a connection to the similarly named date-manager.com domain? The strongest finding is local.
Members-only article
This story is members-only. Sign in to read the full body, indicators of compromise, and VirusTotal context.
Sign in to read