| url | hxxps://mtl-logistics[.]com/css/sharethepoint/point/res.php | 1 | 2026-05-14 |
| url | hxxps://wajah4dslot[.]com/wp-includes/certificates/tmp//res.php | 1 | 2026-05-14 |
| email | [email protected] | 1 | 2026-05-14 |
| url | hxxps://sites[.]google[.]com/view/workspace-business/join | 1 | 2026-05-14 |
| domain | outlook[.]office365[.]com | 1 | 2026-05-14 |
| domain | autodiscover-s[.]outlook[.]com | 1 | 2026-05-14 |
| npm_package | @anthropic-ai/claude-code | 1 | 2026-05-14 |
| sha256 | 1b6326857fa635d396851a9031949cfdf6c806130767c399727d78a1c2a0126c | 1 | 2026-05-14 |
| url | hxxp[:]//localhost:3002/crypto-data | 1 | 2026-05-14 |
| sha256 | 052d5220529b6bd4b01e5e375b5dc3ffd50c4b137e242bbfb26655fd7f475ac6 | 1 | 2026-05-14 |
| sha256 | 54077a5b15638e354fa02318623775b7a1cc0e8c21e59bcbab333035369e377f | 1 | 2026-05-14 |
| sha256 | 65dca34b04416f9a113f09718cbe51e11fd58e7287b7863e37f393ed4d25dde7 | 1 | 2026-05-14 |
| domain | ado-read-parser[.]com | 1 | 2026-05-14 |
| domain | earl-dont-princess-bit[.]trycloudflare[.]com | 1 | 2026-05-14 |
| domain | frontier-shops-timothy-cal[.]trycloudflare[.]com | 1 | 2026-05-14 |
| domain | harbor-microwave-called-teams[.]trycloudflare[.]com | 1 | 2026-05-14 |
| domain | module-brush-sort-factory[.]trycloudflare[.]com | 1 | 2026-05-14 |
| cve | CVE-2025-54957 | 1 | 2026-05-14 |
| sha256 | 8f7aa15c77bde94087bb74dfc072e25212797b313731b4cad0ded3e152268dcf | 1 | 2026-05-14 |
| sha256 | e1869d6571894f058dd4ab2b66f060628dc364ee8e29afbd2323c95e5002fb8e | 1 | 2026-05-14 |
| sha256 | 019e6c2cf58386039133981f3377b085fbd70c98ae8613c7c6a4f10a9f2d9824 | 1 | 2026-05-14 |
| domain | 1-you[.]njalla[.]no | 1 | 2026-05-14 |
| domain | 2-can[.]njalla[.]in | 1 | 2026-05-14 |
| sha256 | 34e2d63b5db7e24c808711c2ca0c0a42afde97a0086d7d81609110c002d18d7c | 1 | 2026-05-14 |
| domain | 3-get[.]njalla[.]fo | 1 | 2026-05-14 |
| ip | 47[.]100[.]60[.]237 | 1 | 2026-05-14 |
| sha256 | 596c453c9dbb7240f1ce05cc025496524ce7c538c23a9b2171174bf32b5691a1 | 1 | 2026-05-14 |
| ip | 62[.]84[.]102[.]85 | 1 | 2026-05-14 |
| sha256 | b8543b2a1ad8862ebfef18924cf5444d2adfee996939963f4fc2748c582cf9a9 | 1 | 2026-05-14 |
| sha256 | b8fa1b2fade45304c003909e375d2519ea447b498b7d93fe7c50db014d30f4fa | 1 | 2026-05-14 |
| filename | C:\ProgramData\MicrosoftOneDrive\keys.dat | 1 | 2026-05-14 |
| domain | dns-providersa2[.]com | 1 | 2026-05-14 |
| domain | git[.]justdotrip[.]com | 1 | 2026-05-14 |
| url | hxxps://dns-providersa2[.]com/check | 1 | 2026-05-14 |
| url | hxxps://dns-providersa2[.]com/upload | 1 | 2026-05-14 |
| sha256 | d747b41739349828566bfae0b522ef4b746a6f46e828a395d1f3922b66442d40 | 1 | 2026-05-14 |
| url | hxxps://api[[.]]telegram[[.]]org/bot7231970337:AAExyV3dvbNs6xkMJB7S2hArUash9owd-bw/sendMessage | 1 | 2026-05-14 |
| filename | com.finder.helper.plist | 1 | 2026-05-14 |
| url | hxxp://38[.]244[.]158[.]56/contact | 1 | 2026-05-14 |
| url | hxxp://45[.]94[.]47[.]204/api/join/ | 1 | 2026-05-14 |
| url | hxxp://45[.]94[.]47[.]204/api/tasks/ | 1 | 2026-05-14 |
| url | hxxps://sphereou[.]com/cleaner3/update | 1 | 2026-05-14 |
| url | hxxps://sphereou[.]com/cleanera | 1 | 2026-05-14 |
| filename | .mainhelper | 1 | 2026-05-14 |
| domain | sassonco[.]com | 1 | 2026-05-14 |
| sha256 | 239440c830e17530dda0a8a06ed2708860998750a1e3ed2239e919465dc59420 | 1 | 2026-05-13 |
| sha256 | c2d6bcacc88177e0f2c8c262726f86f37e671b1692c8bc135bac4b610ddcf31a | 1 | 2026-05-13 |
| url | hxxps://democracy[.]wandsworth[.]gov[.]uk/mgCalendarMonthView.aspx?M=1&Y=2026&GL=1&bcr=1 | 1 | 2026-05-13 |
| url | hxxps://moderngov[.]lambeth[.]gov[.]uk/mgCalendarMonthView.aspx?M=1&Y=2026&GL=1&bcr=1 | 1 | 2026-05-13 |
| url | hxxps://moderngov[.]southwark[.]gov[.]uk/mgCalendarMonthView.aspx?M=1&Y=2026&GL=1&bcr=1 | 1 | 2026-05-13 |
