| ip | 193[.]26[.]115[.]42 | 1 | 2026-07-06 |
| sha256 | 53f1da8a032115aa682749a114f4cfebcb5ef933400a89b4bbfa84f2057222ff | 1 | 2026-07-06 |
| sha256 | b7ca8fd9ebe0a76f16deea315fac7ee94dcb18e6ac2832b5c4cb562fbc6e0ed3 | 1 | 2026-07-06 |
| sha256 | c380268d493e0cba914ce2bc55faa1d7c050c599893c3196fee01fa745e6466a | 1 | 2026-07-06 |
| sha256 | ced4407f4ac7e43c1a3010a394d111d2ad1b50a2e95668b4e9cfe739235e67bd | 1 | 2026-07-06 |
| sha256 | ec68666e8f0a3b9870d7177bab684c8dcfb8ca0bc7c8c484a71b2b33ea4e26f4 | 1 | 2026-07-06 |
| sha256 | ff5dbdcf6d7ae5d97b6f3ef412df0b977ba4a844c45b30ca78c0eeb2653d69a8 | 1 | 2026-07-06 |
| url | hxxps://signindat[.]com/ElevatorShellCode[.]exe | 1 | 2026-07-06 |
| url | hxxps://signindat[.]com/patch[.]exe | 1 | 2026-07-06 |
| url | hxxps://signindat[.]com/Rate_Confirmation_LD-2026-0847[.]pdf | 1 | 2026-07-06 |
| url | hxxps://signindat[.]com/stage[.]ps1 | 1 | 2026-07-06 |
| url | hxxps://signindat[.]com/update[.]exe | 1 | 2026-07-06 |
| email | loadofferstender[@]gmail[.]com | 1 | 2026-07-06 |
| domain | signindat[.]com | 1 | 2026-07-06 |
| sha256 | 0a3663648a46771a5a5423ad01e91a4e7ba825595e99fa934cb35cbb4848adc8 | 1 | 2026-07-06 |
| sha256 | 2cb1ad3b22db8e3666ea138fee88034a87a87cf43db3d3265a675ebf221379b0 | 1 | 2026-07-06 |
| sha256 | 30cb4679c4b8599eeb3d63a551716475c6332bdc4d4b4e3de0964aadb3092a10 | 1 | 2026-07-06 |
| sha256 | 37e123bd7998af4eae32718ce254776f36365a80ba56952593dab46f536d4066 | 1 | 2026-07-06 |
| sha256 | 5394d3b220de4695f731647e3a70545f951a8912ceb0c6585efab8d6842e8b42 | 1 | 2026-07-06 |
| sha256 | 541b1f417b9e42078c3355693a8a492b6a76048850f6549a429e0be99e6819cb | 1 | 2026-07-06 |
| sha256 | 5dc08bda6919a57a85e5f38b857985fa71529ca39c8299868d5a49a987e19b18 | 1 | 2026-07-06 |
| sha256 | 7d586fb7f94182a8e2a0e53c7e4deb898066da029da5cd9972a94a59ca6d255a | 1 | 2026-07-06 |
| sha256 | 92cae0ad7f98f51a14bcc0ee05e372ebdc29ea96ea7bd161bd3f55198767603b | 1 | 2026-07-06 |
| sha256 | a4aa217def4c38f4ecacdf47b1cd687f60cc74c18ab75195be3c4357a790bf41 | 1 | 2026-07-06 |
| domain | adserviceupdate[.]com | 1 | 2026-07-06 |
| domain | auth[.]hospitalinstallation[.]com | 1 | 2026-07-06 |
| sha256 | b630c96d3763182533d4fb9b614134382bd644cb02c6c1c3ade848b6ecc31e86 | 1 | 2026-07-06 |
| sha256 | cbc9485db715e1b8cc384fe94b4cceadca4006cda8a5e28adc8848529cfafc93 | 1 | 2026-07-06 |
| sha256 | ccf218189c3aadb1c761da14bfda3bae686769031e1e1b10007648bd72e34748 | 1 | 2026-07-06 |
| domain | google[.]com[.]hospitalinstallation[.]com | 1 | 2026-07-06 |
| domain | hospitalinstallation[.]com | 1 | 2026-07-06 |
| url | hxxps://adserviceupdate[.]com/cac[.]aspx | 1 | 2026-07-06 |
| url | hxxps://hygienehistory[.]com/cac[.]aspx | 1 | 2026-07-06 |
| domain | hygienehistory[.]com | 1 | 2026-07-06 |
| mutex | MYMUTEX123HELLP02 | 1 | 2026-07-06 |
| mutex | MYMUTEX123HELLP04 | 1 | 2026-07-06 |
| filename | n-HTCommp.dll | 1 | 2026-07-06 |
| filename | uxtheme.dll | 1 | 2026-07-06 |
| filename | WinDirStat.exe | 1 | 2026-07-06 |
| domain | allegianceinvestigators[.]com | 1 | 2026-07-06 |
| email | patm[@]allegianceinvestigators[.]com | 1 | 2026-07-06 |
| sha256 | 048e18416177de2ead251abdf4d89837f6807c6aba4d5b1debe49adfdecbf05c | 1 | 2026-07-06 |
| sha256 | 087f002df0a02c8c74f3ba5cd99cf29fb9efff38bf57b3d808e34a5dd4200dd2 | 1 | 2026-07-06 |
| sha256 | 142bac0e2148e0d47891b6cd7311195c4acbe33b700fad54a201c52a2bc46219 | 1 | 2026-07-06 |
| ip | 192[.]36[.]27[.]51 | 1 | 2026-07-06 |
| sha256 | 252a8bb2eb9c96c5e6cc7cab822e2ed0d508032f9350351221781684e86c03ab | 1 | 2026-07-06 |
| ip | 62[.]164[.]177[.]25 | 1 | 2026-07-06 |
| sha256 | 65ab49119c845801f29a57e8aa177146b2ffbd289d4278109b146f933380f951 | 1 | 2026-07-06 |
| sha256 | 6bbf10bcbef7ac5102b54c81137859891a3802dbacd888be90f990d50e18b0b4 | 1 | 2026-07-06 |
| sha256 | 6f9fbe29f8cc2788e2bc9d631e0eea2a8e9837076837b55838005a0e654f0a9e | 1 | 2026-07-06 |
