| filename | /tmp/gemhome/.gem/credentials | 1 | 2026-05-13 |
| url | hxxps://audit[.]checkmarx[.]cx/v1/telemetry | 3 | 2026-05-13 |
| filename | ~/.claude.json | 1 | 2026-05-13 |
| url | hxxps://litter[.]catbox[.]moe/iqesmbhukgd2c7hq.sh | 1 | 2026-05-13 |
| filename | ~/.kiro/settings/mcp.json | 1 | 2026-05-13 |
| domain | skyhanni[.]cloud | 1 | 2026-05-13 |
| filename | C:\ProgramData\WindowsUpdateService\UpdateDir\Ipd | 1 | 2026-05-13 |
| filename | C:\Users\Public\Music\abc123c.d | 1 | 2026-05-13 |
| url | /api/tools/call | 1 | 2026-05-13 |
| url | /sse | 1 | 2026-05-13 |
| domain | attacker[.]example | 1 | 2026-05-13 |
| url | hxxps://attacker[.]example/install_trojan.sh | 1 | 2026-05-13 |
| domain | generativelanguage[.]googleapis[.]com | 1 | 2026-05-13 |
| url | hxxps://go[.]microsoft[.]com/fwlink/ | 1 | 2026-05-13 |
| url | hxxps://www[.]google[.]com/generate_204 | 1 | 2026-05-13 |
| filename | /dat/14/data/postgresql.conf | 1 | 2026-05-13 |
| filename | /etc/passwd | 1 | 2026-05-13 |
| filename | /usr/bin/su | 1 | 2026-05-13 |
| filename | /tmp | 1 | 2026-05-13 |
| domain | v0[.]dev | 1 | 2026-05-13 |
| domain | vercel[.]app | 1 | 2026-05-13 |
| md5 | a26019b68ef060e593b8651262cbd0f6 | 1 | 2026-05-13 |
| domain | helper[.]zulipchat[.]com | 1 | 2026-05-13 |
| sha256 | 1139b39d3cc151ddd3d574617cf113608127850197e9695fef0b6d78df82d6ca | 1 | 2026-05-13 |
| sha256 | 35b2a5260b21ddb145486771ec2b1e4dc1f5b7f2275309e139e4abc1da0c614b | 1 | 2026-05-13 |
| filename | C:\Windows\Temp\whatpc.ps1 | 1 | 2026-05-13 |
| domain | www[.]drivelivelime[.]com | 1 | 2026-05-13 |
| registry_key | \REGISTRY\MACHINE\SOFTWARE\Microsoft\DRM | 1 | 2026-05-13 |
| registry_key | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PlayReady\Troubleshooter | 1 | 2026-05-13 |
| sha1 | 03E3ECE9F48CF4104AAFC535790CA2FB3C6B26CF | 1 | 2026-05-13 |
| domain | 1980food[.]co[.]kr | 1 | 2026-05-13 |
| sha1 | 95BDB94F6767A3CCE6D92363BBF5BC84B786BDB0 | 1 | 2026-05-13 |
| sha1 | FC0C691DB7E2D2BD3B0B4C1E24D18DF72168B7D9 | 1 | 2026-05-13 |
| url | hxxp://xiazai[.]sqgame[.]com[.]cn/dating/20240429.zip | 1 | 2026-05-13 |
| domain | sqgame[.]com[.]cn | 1 | 2026-05-13 |
| domain | www[.]lawwell[.]co[.]kr | 1 | 2026-05-13 |
| url | hxxps://putuartana[.]com/cleandpt | 1 | 2026-05-13 |
| url | login.microsoftonline.com/common/oauth2/deviceauth | 1 | 2026-05-13 |
| sha256 | 50212a875643520353df158196b9b3be4595094125ad8d2d2c48bdd9cb04ce1f | 1 | 2026-05-13 |
| sha256 | 66664a49edbcee0ed0d8365839707916e92d3aa06e7f26f33c9dcc58e5fc1ef3 | 1 | 2026-05-13 |
| sha256 | 832a976d1a8d54e296e8479aedbd89fa24baa02b8409a78bf06d4d03340881bd | 1 | 2026-05-13 |
| url | hxxps://zero[.]masscan[.]cloud:443/v1/telemetry | 1 | 2026-05-13 |
| domain | zero[.]masscan[.]cloud | 1 | 2026-05-13 |
| url | hxxp://169[.]254[.]169[.]254 | 2 | 2026-05-13 |
| sha256 | 5ae8b2343e97cc3b2c945ec34318b63f27fa2db1e3d8fbaa78c298aa63db52ed | 1 | 2026-05-13 |
| sha256 | fe64699649591948d6f960705caac86fe99600bf76e3eae29b4517705a58f0e2 | 1 | 2026-05-13 |
| url | hxxp://169[.]254[.]170[.]2 | 1 | 2026-05-13 |
| url | hxxp://metadata[.]google[.]internal | 1 | 2026-05-13 |
| domain | <companyname>id[[.]]com | 1 | 2026-05-13 |
| domain | <companyname>internal[[.]]com | 1 | 2026-05-13 |
