# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: deyma

# Reference: https://twitter.com/nullcookies/status/1061739625658617857

onedrive.one

# Reference: https://twitter.com/0_1_0_1_0_0_0_0/status/1121107266982301696
# Reference: https://app.any.run/tasks/c7496f6f-ac83-4b05-ad64-c1ed0f1fd98e

gohaiendo.com

# Reference: https://twitter.com/anyrun_app/status/1122812186680856577
# Reference: https://app.any.run/tasks/b389fddc-d90a-427c-a164-ff73dc2c185b
# Reference: https://www.virustotal.com/gui/ip-address/163.172.84.54/relations

http://163.172.84.54

# Reference: https://twitter.com/abuse_ch/status/1123520051599085570

rayshash.com

# Reference: https://twitter.com/Timele9527/status/1128577411321348096
# Reference: https://otx.alienvault.com/pulse/5cdc4df1cb5caaccf42c7e33

charley-online.com
fighiting1013.org
naver-download.com
tgbabcrfv.1apps.com
alabamaok0515.1apps.com

# Reference: https://twitter.com/adrian__luca/status/1148186673739685888
# Reference: https://app.any.run/tasks/adc3b9ac-9888-4902-8e58-754dc2a100e9/

http://46.166.129.157

# Reference: https://twitter.com/Paladin3161/status/1156147679929327617

luckyshark.cash

# Reference: https://www.proofpoint.com/us/threat-insight/post/systembc-christmas-july-socks5-malware-and-exploit-kits

amnsns.com
dsntu.top
elienne.net

# Reference: https://twitter.com/VK_Intel/status/1158620228261208064

cj42138.tmweb.ru

# Reference: https://twitter.com/Paladin3161/status/1160180765889445888

laph.icu

# Reference: https://twitter.com/P3pperP0tts/status/1160528128588099584

luckymonkey.net.in

# Reference: https://twitter.com/Paladin3161/status/1160640124985548800
# Reference: https://pastebin.com/bhufJSbL

eharmony.live
nepunchik.club
pardubic.club

# Reference: https://twitter.com/tkanalyst/status/1163084043832872961
# Reference: https://app.any.run/tasks/ee0e55e6-84dd-4576-a32c-153629cffcc7/

clickies.site

# Reference: https://twitter.com/tkanalyst/status/1170213006577291265

bolsaooma.com
fosentora.com
mzokrekaa.com

# Reference: https://twitter.com/tkanalyst/status/1177952093287530496
# Reference: https://app.any.run/tasks/1216eae6-4088-4d51-8e47-2094a451754d/

jombala.icu
winterfresh.icu
youhohoo.club

# Reference: https://cofense.com/new-phishing-campaign-targets-u-s-taxpayers-dropping-amadey-botnet/

ledehaptal.ru
nofawacat.com
yosemitemanagement.com/fonts/page5

# Reference: https://twitter.com/raby_mr/status/1184395177135230977
# Reference: https://app.any.run/tasks/c36bfb5d-77de-478f-be8f-99057be21c6e/

http://31.184.196.226

# Reference: https://twitter.com/tkanalyst/status/1184655705103634435
# Reference: https://app.any.run/tasks/20218f80-9838-41f4-b6d6-7dbbcd60107a/

go-refund.com

# Reference: https://twitter.com/adrian__luca/status/1148186673739685888
# Reference: https://any.run/report/2f41879d3656e45471a0a784d61eb339f343f7614a19d2916be28685d1501c0b/b69b53a3-1003-47c4-b836-20fe21cb5640

http://46.166.129.157

# Reference: https://app.any.run/tasks/5c1df594-6f00-44e7-998d-d98c220babfc/

bobryangood.ga

# Reference: http://tracker.viriback.com/ (# 2019-11-04)

http://162.222.215.45
http://163.172.151.205
http://193.32.161.69
http://217.8.117.51
http://31.184.196.226
http://31.184.197.229
http://46.166.129.157
6pak.xyz
acceso.live
ahorros.space
ashleywalkerfuns.com
bobryangood1.ga
bolsaooma.com
cooperativa.casa
ct-ov.com
di-1.icu
highparrot12.uz
v-chek.in
vi-1.icu
vt-ne.com
zi-1.icu

# Reference: https://twitter.com/James_inthe_box/status/1197917197324058624

http://217.8.117.46

# Reference: https://twitter.com/tkanalyst/status/1211078881735663618
# Reference: https://app.any.run/tasks/1b30a1b8-0c09-4d71-86e6-1ada4bb92b25/

dasterhorora.com
nutrukomolol.com
xoxoxnutricia.com

# Reference: https://pastebin.com/8sNr32UC

snowman720.com

# Reference: https://app.any.run/tasks/4714154d-1ea6-41b1-ba7c-b877cf8d7c77/

drgh3.in

# Reference: https://app.any.run/tasks/96ce5eb3-0058-452f-8924-4946c769cae2/

http://217.8.117.51

# Reference: https://app.any.run/tasks/de8dc698-6f59-43ca-a465-3baee439b34d/

http://193.111.152.61

# Reference: https://www.virustotal.com/gui/ip-address/51.38.140.6/relations

http://51.38.140.6

# Reference: https://twitter.com/ViriBack/status/1120311322917388288

dsuda2.com

# Reference: https://twitter.com/FaLconIntel/status/1241391431802994689

adsapomg.space

# Reference: https://app.any.run/tasks/81350afa-ba1f-43ce-ba61-67ce1c6fae1e/

servicestatus.one

# Reference: https://twitter.com/FaLconIntel/status/1248984602581979138
# Reference: https://app.any.run/tasks/3ebea34f-7c85-41e5-983e-810ac1f43ab1/

http://217.8.117.79

# Reference: https://www.virustotal.com/gui/file/c9b24ffb06efd7fd7e397501be3a5b6d5bec8d300c26792e7a7e1c391e094d60/detection
# Reference: https://app.any.run/tasks/6264a84e-f3b1-4ad3-95e4-260872759fc9/

http://217.8.117.17

# Reference: https://www.virustotal.com/gui/file/d62a40010c67fd83e79a6307c7be774a26ddf38f05c71785936227f3b6882584/detection

http://217.8.117.89

# Reference: https://twitter.com/p5yb34m/status/1280986879911817216
# Reference: https://app.any.run/tasks/1861f25a-5532-4329-9944-450cde9b90b5/

http://185.70.184.2
/smjw6q7/antarktida.php

# Reference: https://www.virustotal.com/gui/file/72a908033a308ec5da4e384c2c6efb33405afc50688033849783267e6fb1bddc/detection

http://217.8.117.52

# Reference: https://app.any.run/tasks/4a87ce41-fa18-4026-9c60-b719a15bd5ec/

gucciai.net

# Reference: https://www.virustotal.com/gui/file/349cd9f2581bc4dd25c6637f1f31c716b5ac1875048b21594ca87fbd5776bc10/detection

ahorros.space
cooperativa.casa
transaccion.ga

# Reference: https://www.virustotal.com/gui/file/d07a8c2c966fa5f5aa5bcc19dd6251e14c7b9f2562e523e93c1b0bb558b4f81a/detection

techterms.online
trafficsystem.site

# Reference: https://www.virustotal.com/gui/file/5281375d1a80f8219ec41db361f92c8f6bf15cdce338467b8125c72ecda7d2f5/detection

bandwidthmeter.online
checker.monster
reverselookup.icu

# Reference: https://twitter.com/wwp96/status/1331057827440455680
# Reference: https://app.any.run/tasks/2a5a506b-c00c-45cb-b434-2fdd3c2ecdac/

http://217.8.117.177

# Reference: https://app.any.run/tasks/405b73c6-a586-40be-a6d6-a49c574acb6a/

http://217.8.117.76/tools/ports/

# Reference: https://app.any.run/tasks/97428820-1055-4d30-8c9c-13d8736ce785/

searchtool.space
tradingsignals.club
cpaglobal.cloud
http://69.51.24.27/uploadss/
/oOjgox/

# Reference: https://twitter.com/JAMESWT_MHT/status/1340954874272428034
# Reference: https://app.any.run/tasks/49cef4c4-37d9-4202-9ce2-582b0aaf909e/

http://176.123.2.251

# Reference: https://www.virustotal.com/gui/file/12c3d8e0578446ff28416d87da0da7fffa73dce7c511762aca993e5327e1a851/detection
# Reference: https://www.virustotal.com/gui/file/45ac6328e135999706d027f8ab9d30eae5c4af655ff67dffa874399b70af18ea/detection

http://157.90.24.103
foflikenoiujiiik.cn
joikilloiujjtyaaa.xyz

# Reference: https://www.virustotal.com/gui/file/279524f17f8dd8753f57c2e3e91d21ad84db10316dfbf925cc19556cef55b99d/detection

mynexa.io

# Reference: https://www.virustotal.com/gui/file/f1dc32d9d1065e929bea07b26b09210056271a74dcf0e6b4e2d9705590b3753e/detection

http://217.8.117.98
downloadcenter.xyz

# Reference: https://www.virustotal.com/gui/file/c0e1d62205f83706500559e74a4f8d151cade697ada9147339e1b558c1256152/detection

moneypotlol.com

# Reference: https://tria.ge/210217-xbsbsbsyks/behavioral1

http://185.215.113.17

# Reference: https://otx.alienvault.com/pulse/603b86f795ef0ee41748f555

gunbot.top

# Reference: https://twitter.com/wwp96/status/1366428779904704516
# Reference: https://app.any.run/tasks/79bd2829-202d-4b8d-ac71-16d9e43e8a6e/

comejoin.in

# Reference: https://twitter.com/wwp96/status/1367135406240780293
# Reference: https://app.any.run/tasks/85098506-e904-455b-8020-2a835341c796/

http://185.215.113.207

# Reference: https://twitter.com/ffforward/status/1369040946684432387
# Reference: https://app.any.run/tasks/486fda51-1538-4fd0-aa9f-7e94fc03b06e/

http://176.111.174.67

# Reference: https://www.virustotal.com/gui/file/f6352437eda89bc239bd7594f3103cafc397c1790f01a333fc72d2e8b11b7fa4/detection

http://176.111.174.66

# Reference: https://urlscan.io/result/8e5f3913-f293-4b2f-95bc-347bed252017/

spacemonkey.top

# Reference: https://www.virustotal.com/gui/ip-address/34.89.87.88/relations
# Reference: https://www.virustotal.com/gui/file/23aad54285f19773a0283f94cadc1cc0675ea4ed85c17aee25b74f67fd84f1f3/detection
# Reference: https://www.virustotal.com/gui/file/b3023d81d673dfb596e167fcbe9b086534e5ff6085319bcf675c0302425fbcc0/detection

toolhelper.net
toolhelper.xyz

# Reference: https://twitter.com/petrovic082/status/1387323416097722372
# Reference: https://www.virustotal.com/gui/file/2b0cfb46b5c4981f267b7208192bf443a082920f2625ba09a7e929e743aa655a/detection

http://185.215.113.74

# Reference: https://www.facebook.com/drok3r.RedBird/photos/botnet-amadey-panel-de-login-httpsifttt2eurlwg-httpservicestatusoneb2ccsagloginp/2234082036852111/

accounts-logmein.com

# Reference: https://twitter.com/petrovic082/status/1390277815166279682

http://45.155.205.172

# Reference: https://www.virustotal.com/gui/file/ce16a6e3cacd39fad5839344dac95d9c77ade3336843fb2384507af8419f93ee/detection

huxere.xyz

# Reference: https://www.virustotal.com/gui/file/5fa5259f186ea249622f17fa179e8b3c9a9cc5928914a8f1cea5a6665af62460/detection

http://185.215.113.57

# Reference: https://www.virustotal.com/gui/file/f1dab0a883c83e437427e390b87a0e26ef7cc207e4e55357d658243ef3b0087a/detection

http://185.215.113.49

# Reference: https://www.virustotal.com/gui/file/a78ff3b4a0ed4de5a4e38a4fcb38319756ae0f1c487d270ad80ce383331efd23/detection

csgoprofind.net

# Reference: https://twitter.com/wwp96/status/1411205910056288256
# Reference: https://app.any.run/tasks/8471520c-ff28-483e-9768-bb2e09bd959b/

http://185.215.113.79

# Reference: https://twitter.com/wwp96/status/1411402086466588678
# Reference: https://twitter.com/r3dbU7z/status/1493263818222415879
# Reference: https://app.any.run/tasks/00f3ca2a-06c8-4d00-9d11-ff232c48a811/

http://185.215.113.55

# Reference: https://www.virustotal.com/gui/file/a014e37a5169f2622c91d2fec066ab0105e722c3b082f9b7041305459ce0aac3/detection

on291220.xyz
on3121.xyz
s301220.xyz

# Reference: https://www.virustotal.com/gui/file/82235c52f0d9972900d487b46ced966e6813bdd10c87269355df29b9de066b87/detection

http://194.26.29.220

# Reference: https://www.virustotal.com/gui/ip-address/185.193.143.70/relations
# Reference: https://www.virustotal.com/gui/file/5ed5c5f56b1d34db4323b409079cb057f7e921e913889bbb99b325065a0193dc/detection

angiearm.top
dustontail.top
goldhole.top
lampoone.top

# Reference: https://twitter.com/MBThreatIntel/status/1464434083639877632

discoverahuge.xyz
eredirected.xyz
makemark.xyz
s.discoverahuge.xyz
x.eredirected.xyz
w.makemark.xyz

# Reference: https://www.virustotal.com/gui/file/42e369c8a08e42bb7ca81f3b4598b1352766fd602c32adc21cd5f1afab85f7f3/detection

http://185.215.113.13

# Reference: https://www.virustotal.com/gui/file/7c9546c6c8cf971e491083f1886854a95cf971b01e34e222b80263cf7a02da6b/detection

http://185.215.113.20

# Reference: https://www.virustotal.com/gui/file/8f976142fb03daa45036293472c270c4c2020d669d17f45175bef0d0551df5b7/detection

http://185.215.113.47

# Reference: https://twitter.com/0xrb/status/1493276420386131968

http://185.215.113.56

# Reference: https://www.virustotal.com/gui/file/33d5edfef5ffcf3f32ecad4426a11a24069d8e37d3936d528bfb26ff34edbe99/detection

http://185.7.214.238

# Reference: https://www.virustotal.com/gui/file/5a72b3f5c85aa3e2727daf8a82644ca537710f0cbaed80c2b3efce0abb2d8322/detection

http://185.215.113.76

# Reference: https://www.virustotal.com/gui/file/863438585d157f71a3ab1ce83367ea77546cf561662f784e3ecc35c2c5473f29/detection

myeeducationplus.com

# Reference: https://www.virustotal.com/gui/file/d58eafe0ab1443b283b34e975cb5300d69a72e1399d779bd182f6249e18dda27/detection

http://139.99.244.17

# Reference: https://twitter.com/fr0s7_/status/1522656306594787329
# Reference: https://www.virustotal.com/gui/file/a4c48e301ed28cc7241db041ca1b3195a9260feba56ac9f2c8bfa15d21b583a5/detection

http://92.204.160.158

# Reference: https://www.virustotal.com/gui/file/983fe88a155bdc1b17641ff91365b1fd5cb53654d113954d16c50aed9696cf26/detection

http://190.123.44.138

# Reference: https://www.virustotal.com/gui/file/05a3028bc4f10ff3387b486c171178f7d5a4864de59f6693d2dcbdae035820d1/detection

http://185.215.113.38

# Reference: https://twitter.com/fr0s7_/status/1534628175476625411

http://193.106.191.122

# Reference: https://twitter.com/malwrhunterteam/status/1537521767262015488

http://45.227.255.49

# Reference: https://www.virustotal.com/gui/file/43b75e8257761d5ecf09465accfd778bd07ea70c32995a2f15aef33801f21b94/detection

victory-collections.top

# Reference: https://www.virustotal.com/gui/file/1996ddffe82a5b4382c576c6e2a47ccb03321ea3d669d0ad9d5f4169e379565d/detection
# Reference: https://www.virustotal.com/gui/file/1996ddffe82a5b4382c576c6e2a47ccb03321ea3d669d0ad9d5f4169e379565d/detection

alltopictso.top
mexop.top

# Reference: https://www.virustotal.com/gui/file/a3b10ea6848cf47d9e441f63712a12aaa4b413a7dd73b424d94239a2bbddca55/detection

umbrocell4433.xyz
wellsdesign.site
/bPwsAq2/index.php
/bPwsAq2/login.php
/bPwsAq2/clip.dll
/bPwsAq2/clip64.dll
/bPwsAq2/cred.dll
/bPwsAq2/scr.dll
/bPwsAq2/cred64.dll
/bPwsAq2/scr64.dll
/bPwsAq2/plugins/clip.dll
/bPwsAq2/plugins/clip64.dll
/bPwsAq2/plugins/cred.dll
/bPwsAq2/plugins/scr.dll
/bPwsAq2/plugins/cred64.dll
/bPwsAq2/plugins/scr64.dll
/ni5TgT/index.php
/ni5TgT/login.php
/ni5TgT/clip.dll
/ni5TgT/cred.dll
/ni5TgT/src.dll
/ni5TgT/clip64.dll
/ni5TgT/cred64.dll
/ni5TgT/src64.dll
/ni5TgT/plugins/clip.dll
/ni5TgT/plugins/clip64.dll
/ni5TgT/plugins/cred.dll
/ni5TgT/plugins/src.dll
/ni5TgT/plugins/cred64.dll
/ni5TgT/plugins/src64.dll

# Reference: https://www.virustotal.com/gui/file/01d692761b0698f1246ab16aaf09f74e7801a26a271405028c2771366008c363/detection

http://185.215.113.204
hvjaoahgv.site
/f84Nls2/index.php
/f84Nls2/login.php
/f84Nls2/clip.dll
/f84Nls2/cred.dll
/f84Nls2/src.dll
/f84Nls2/clip64.dll
/f84Nls2/cred64.dll
/f84Nls2/src64.dll
/f84Nls2/plugins/clip.dll
/f84Nls2/plugins/cred.dll
/f84Nls2/plugins/src.dll
/f84Nls2/plugins/clip64.dll
/f84Nls2/plugins/cred64.dll
/f84Nls2/plugins/src64.dll

# Reference: https://twitter.com/MBThreatIntel/status/1573342157272133632
# Reference: https://www.virustotal.com/gui/file/b3e4ddc5b9947b700ee667ee1d9cadbcfca74cd00210b0bb256981221f9fe62c/detection

198.135.54.147:1088
eredirected.xyz
startdown.xyz
xml-post.xyz
en.eredirected.xyz
en.xml-post.xyz
/xC0m3/index.php
/xC0m3/login.php
/xC0m3/clip.dll
/xC0m3/cred.dll
/xC0m3/scr.dll
/xC0m3/clip64.dll
/xC0m3/cred64.dll
/xC0m3/scr64.dll
/xC0m3/plugins/clip.dll
/xC0m3/plugins/cred.dll
/xC0m3/plugins/scr.dll
/xC0m3/plugins/clip64.dll
/xC0m3/plugins/cred64.dll
/xC0m3/plugins/scr64.dll

# Reference: https://tria.ge/221008-n6a4caefg6

http://185.215.113.15
/Lkb2dxj3/index.php
/Lkb2dxj3/login.php
/Lkb2dxj3/clip.dll
/Lkb2dxj3/cred.dll
/Lkb2dxj3/scr.dll
/Lkb2dxj3/clip64.dll
/Lkb2dxj3/cred64.dll
/Lkb2dxj3/scr64.dll
/Lkb2dxj3/plugins/clip.dll
/Lkb2dxj3/plugins/cred.dll
/Lkb2dxj3/plugins/scr.dll
/Lkb2dxj3/plugins/clip64.dll
/Lkb2dxj3/plugins/cred64.dll
/Lkb2dxj3/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/6ac9530c04751e3a19e49ff45b88139e1eb974870357a2307a2478c86964fda5/detection

http://217.8.117.64

# Reference: https://asec.ahnlab.com/en/40483/
# Reference: https://www.virustotal.com/gui/ip-address/92.38.135.76/relations
# Reference: https://www.virustotal.com/gui/file/9134dbb0be87ad3c111a4bad5a6aae8af56cbae0b5c67f2a584f662f7cfe0b6d/detection
# Reference: https://www.virustotal.com/gui/file/5876bb57e657e96fe064414a2315ab3777d952606ca24317ee82cfdfe71f20a1/detection
# Reference: https://www.virustotal.com/gui/file/a712afd7431e0e1b9afc0d83f48f27ae5f9f5cb480cf9669cdba19ffe39cce65/detection
# Reference: https://www.virustotal.com/gui/file/b8565544a4171b9183edc6f6394a63e3c037f6584cc3895453a3dea4abcfac5f/detection

bj226871.info
hc228783.info
ms228783.info
msc34971.net
office-download3791.com
rs-shop7301.com

# Reference: https://twitter.com/malwrhunterteam/status/1585963555584880641
# Reference: https://www.virustotal.com/gui/file/142cbad8b9d400380c78935e60db104ec080812b1a298f9753a41b2811c856be/detection

http://62.204.41.25
/3g4mn5s/index.php
/3g4mn5s/login.php
/3g4mn5s/clip.dll
/3g4mn5s/cred.dll
/3g4mn5s/clip64.dll
/3g4mn5s/cred64.dll
/3g4mn5s/scr.dll
/3g4mn5s/scr64.dll
/3g4mn5s/plugins/clip.dll
/3g4mn5s/plugins/cred.dll
/3g4mn5s/plugins/clip64.dll
/3g4mn5s/plugins/cred64.dll
/3g4mn5s/plugins/scr.dll
/3g4mn5s/plugins/scr64.dll
/3g4mn5s/scr.dll
/3g4mn5s/scr64.dll

# Reference: https://www.virustotal.com/gui/file/0416483ff64f2b592acae6fbd5ee529b0e32deb6f6fd1503d82c3f69052967af/detection

/Mb1sDv3/index.php
/Mb1sDv3/login.php
/Mb1sDv3/clip.dll
/Mb1sDv3/cred.dll
/Mb1sDv3/clip64.dll
/Mb1sDv3/cred64.dll
/Mb1sDv3/scr.dll
/Mb1sDv3/scr64.dll
/Mb1sDv3/plugins/clip.dll
/Mb1sDv3/plugins/cred.dll
/Mb1sDv3/plugins/clip64.dll
/Mb1sDv3/plugins/cred64.dll
/Mb1sDv3/plugins/scr.dll
/Mb1sDv3/plugins/scr64.dll
/Mb1sDv3/scr.dll
/Mb1sDv3/scr64.dll

# Reference: https://twitter.com/StopMalvertisin/status/1587757089920716800

http://31.41.244.60
/t0nvN3c4/index.php
/t0nvN3c4/login.php
/t0nvN3c4/clip.dll
/t0nvN3c4/cred.dll
/t0nvN3c4/clip64.dll
/t0nvN3c4/cred64.dll
/t0nvN3c4/scr.dll
/t0nvN3c4/scr64.dll
/t0nvN3c4/plugins/clip.dll
/t0nvN3c4/plugins/cred.dll
/t0nvN3c4/plugins/clip64.dll
/t0nvN3c4/plugins/cred64.dll
/t0nvN3c4/plugins/scr.dll
/t0nvN3c4/plugins/scr64.dll
/t0nvN3c4/scr.dll
/t0nvN3c4/scr64.dll

# Reference: https://www.virustotal.com/gui/file/dcc559c45ecf4159655411999117728f288c7e50c78a2414d020f75cc2b86364/detection

http://193.106.191.20
http://193.106.191.201
/panelis/index.php
/panelis/login.php
/panelis/clip.dll
/panelis/cred.dll
/panelis/clip64.dll
/panelis/cred64.dll
/panelis/scr.dll
/panelis/scr64.dll
/panelis/plugins/clip.dll
/panelis/plugins/cred.dll
/panelis/plugins/clip64.dll
/panelis/plugins/cred64.dll
/panelis/plugins/scr.dll
/panelis/plugins/scr64.dll
/panelis/scr.dll
/panelis/scr64.dll

# Reference: https://www.virustotal.com/gui/file/8d098c9e37cb93769ccbb7b58e88996a4a6a4e7b180c1b1f79d742fd690e720d/detection

http://193.56.146.174
/g84kvj4jck/index.php
/g84kvj4jck/login.php
/g84kvj4jck/clip.dll
/g84kvj4jck/cred.dll
/g84kvj4jck/clip64.dll
/g84kvj4jck/cred64.dll
/g84kvj4jck/scr.dll
/g84kvj4jck/scr64.dll
/g84kvj4jck/plugins/clip.dll
/g84kvj4jck/plugins/cred.dll
/g84kvj4jck/plugins/clip64.dll
/g84kvj4jck/plugins/cred64.dll
/g84kvj4jck/plugins/scr.dll
/g84kvj4jck/plugins/scr64.dll
/g84kvj4jck/scr.dll
/g84kvj4jck/scr64.dll

# Reference: https://twitter.com/James_inthe_box/status/1598351953246900228
# Reference: https://app.any.run/tasks/62b03113-07e9-4fd5-a371-634e022e50c8/

http://77.73.133.72
/hfk3vK9/index.php
/hfk3vK9/login.php
/hfk3vK9/clip.dll
/hfk3vK9/cred.dll
/hfk3vK9/clip64.dll
/hfk3vK9/cred64.dll
/hfk3vK9/scr.dll
/hfk3vK9/scr64.dll
/hfk3vK9/plugins/clip.dll
/hfk3vK9/plugins/cred.dll
/hfk3vK9/plugins/clip64.dll
/hfk3vK9/plugins/cred64.dll
/hfk3vK9/plugins/scr.dll
/hfk3vK9/plugins/scr64.dll
/hfk3vK9/scr.dll
/hfk3vK9/scr64.dll

# Reference: https://www.virustotal.com/gui/file/01e1569c9614d44f66b8f493e36ce90a45da47c0007f6f2d9a36eadf79cc0851/detection

exxxodusdomen.hk

# Reference: https://www.virustotal.com/gui/file/1443b2fa3ece332d66836172ff5c75237fd064300f3c8c1754c319935ed44797/detection

http://62.204.41.6
/p9cWxH/index.php
/p9cWxH/login.php
/p9cWxH/clip.dll
/p9cWxH/cred.dll
/p9cWxH/clip64.dll
/p9cWxH/cred64.dll
/p9cWxH/scr.dll
/p9cWxH/scr64.dll
/p9cWxH/plugins/clip.dll
/p9cWxH/plugins/cred.dll
/p9cWxH/plugins/clip64.dll
/p9cWxH/plugins/cred64.dll
/p9cWxH/plugins/scr.dll
/p9cWxH/plugins/scr64.dll
/p9cWxH/scr.dll
/p9cWxH/scr64.dll

# Reference: https://www.virustotal.com/gui/file/55642e6e20a38399879a1c3614023ecfa7ff85d3896c1f83d928d581af6c4748/detection

http://62.204.41.13
/gjend7w/index.php
/gjend7w/login.php
/gjend7w/clip.dll
/gjend7w/cred.dll
/gjend7w/clip64.dll
/gjend7w/cred64.dll
/gjend7w/scr.dll
/gjend7w/scr64.dll
/gjend7w/plugins/clip.dll
/gjend7w/plugins/cred.dll
/gjend7w/plugins/clip64.dll
/gjend7w/plugins/cred64.dll
/gjend7w/plugins/scr.dll
/gjend7w/plugins/scr64.dll
/gjend7w/scr.dll
/gjend7w/scr64.dll

# Reference: https://www.virustotal.com/gui/file/7260966d2c686f00653db013c8236f9846c8a153203fa331bda98de97acc1068/detection

http://62.204.41.79
rap3.lol
/U7vfDb3kg/index.php
/U7vfDb3kg/login.php
/U7vfDb3kg/clip.dll
/U7vfDb3kg/cred.dll
/U7vfDb3kg/clip64.dll
/U7vfDb3kg/cred64.dll
/U7vfDb3kg/scr.dll
/U7vfDb3kg/scr64.dll
/U7vfDb3kg/plugins/clip.dll
/U7vfDb3kg/plugins/cred.dll
/U7vfDb3kg/plugins/clip64.dll
/U7vfDb3kg/plugins/cred64.dll
/U7vfDb3kg/plugins/scr.dll
/U7vfDb3kg/plugins/scr64.dll
/U7vfDb3kg/scr.dll
/U7vfDb3kg/scr64.dll

# Reference: https://asec.ahnlab.com/en/44504/
# Reference: https://otx.alienvault.com/pulse/63a5aae6d3c133acd38b9e73
# Reference: https://www.virustotal.com/gui/file/cd649946c10944269e28a3ca38de31ff24598fe5177509d41fa5130dfcfd4da4/detection

aqwe9sfiwswpyvmj.xyz
pmvqdjfuf3wlx9ki.xyz
smgqnt3eixxksasu.xyz
/jg94cVd30f/index.php
/jg94cVd30f/login.php
/jg94cVd30f/clip.dll
/jg94cVd30f/cred.dll
/jg94cVd30f/clip64.dll
/jg94cVd30f/cred64.dll
/jg94cVd30f/scr.dll
/jg94cVd30f/scr64.dll
/jg94cVd30f/plugins/clip.dll
/jg94cVd30f/plugins/cred.dll
/jg94cVd30f/plugins/clip64.dll
/jg94cVd30f/plugins/cred64.dll
/jg94cVd30f/plugins/scr.dll
/jg94cVd30f/plugins/scr64.dll
/jg94cVd30f/scr.dll
/jg94cVd30f/scr64.dll

# Reference: https://www.virustotal.com/gui/file/18127c921cc5e152c8be95d1a5c7b887fdb0c62832a178f54e68933d7d2eeade/detection

http://77.73.134.45
/fb73jc3/index.php
/fb73jc3/login.php
/fb73jc3/clip.dll
/fb73jc3/cred.dll
/fb73jc3/clip64.dll
/fb73jc3/cred64.dll
/fb73jc3/scr.dll
/fb73jc3/scr64.dll
/fb73jc3/plugins/clip.dll
/fb73jc3/plugins/cred.dll
/fb73jc3/plugins/clip64.dll
/fb73jc3/plugins/cred64.dll
/fb73jc3/plugins/scr.dll
/fb73jc3/plugins/scr64.dll
/fb73jc3/scr.dll
/fb73jc3/scr64.dll

# Reference: https://tria.ge/230111-z539aaac81

http://31.41.244.158

# Reference: https://www.virustotal.com/gui/file/00ba3f14f8b4ad6f6eef2c0419bca03382599c9f3ac0b2e197535e2dfdaf54a5/detection

http://31.41.244.15

# Reference: https://www.virustotal.com/gui/file/0ba6070de6b8909b712ee7dc2003525b46bdac50ec29658d3d8e2f6b85811fa7/detection

http://193.56.146.194
/h49vlBP/index.php
/h49vlBP/login.php
/h49vlBP/clip.dll
/h49vlBP/cred.dll
/h49vlBP/clip64.dll
/h49vlBP/cred64.dll
/h49vlBP/scr.dll
/h49vlBP/scr64.dll
/h49vlBP/plugins/clip.dll
/h49vlBP/plugins/cred.dll
/h49vlBP/plugins/clip64.dll
/h49vlBP/plugins/cred64.dll
/h49vlBP/plugins/scr.dll
/h49vlBP/plugins/scr64.dll
/h49vlBP/scr.dll
/h49vlBP/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1601196364528029697

http://62.204.41.158
/b7ck3X/index.php
/b7ck3X/login.php
/b7ck3X/clip.dll
/b7ck3X/cred.dll
/b7ck3X/clip64.dll
/b7ck3X/cred64.dll
/b7ck3X/scr.dll
/b7ck3X/scr64.dll
/b7ck3X/plugins/clip.dll
/b7ck3X/plugins/cred.dll
/b7ck3X/plugins/clip64.dll
/b7ck3X/plugins/cred64.dll
/b7ck3X/plugins/scr.dll
/b7ck3X/plugins/scr64.dll
/b7ck3X/scr.dll
/b7ck3X/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1601297459166302208

http://62.204.41.252
/nB8cWack3/index.php
/nB8cWack3/login.php
/nB8cWack3/clip.dll
/nB8cWack3/cred.dll
/nB8cWack3/clip64.dll
/nB8cWack3/cred64.dll
/nB8cWack3/scr.dll
/nB8cWack3/scr64.dll
/nB8cWack3/plugins/clip.dll
/nB8cWack3/plugins/cred.dll
/nB8cWack3/plugins/clip64.dll
/nB8cWack3/plugins/cred64.dll
/nB8cWack3/plugins/scr.dll
/nB8cWack3/plugins/scr64.dll
/nB8cWack3/scr.dll
/nB8cWack3/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1601819204688166913

1h3art.me
/i4kvjd3xc/index.php
/i4kvjd3xc/login.php
/i4kvjd3xc/clip.dll
/i4kvjd3xc/cred.dll
/i4kvjd3xc/clip64.dll
/i4kvjd3xc/cred64.dll
/i4kvjd3xc/scr.dll
/i4kvjd3xc/scr64.dll
/i4kvjd3xc/plugins/clip.dll
/i4kvjd3xc/plugins/cred.dll
/i4kvjd3xc/plugins/clip64.dll
/i4kvjd3xc/plugins/cred64.dll
/i4kvjd3xc/plugins/scr.dll
/i4kvjd3xc/plugins/scr64.dll
/i4kvjd3xc/scr.dll
/i4kvjd3xc/scr64.dll

# Reference: https://www.virustotal.com/gui/file/2073406f740a15b0bcdc15b30d558dd7155fff533508247b4304b32d04c7ea85/detection

http://193.42.33.28
/0bjdn2Z/index.php
/0bjdn2Z/login.php
/0bjdn2Z/clip.dll
/0bjdn2Z/cred.dll
/0bjdn2Z/clip64.dll
/0bjdn2Z/cred64.dll
/0bjdn2Z/scr.dll
/0bjdn2Z/scr64.dll
/0bjdn2Z/plugins/clip.dll
/0bjdn2Z/plugins/cred.dll
/0bjdn2Z/plugins/clip64.dll
/0bjdn2Z/plugins/cred64.dll
/0bjdn2Z/plugins/scr.dll
/0bjdn2Z/plugins/scr64.dll
/0bjdn2Z/scr.dll
/0bjdn2Z/scr64.dll
/8bmdh3Slb2/index.php
/8bmdh3Slb2/login.php
/8bmdh3Slb2/clip.dll
/8bmdh3Slb2/cred.dll
/8bmdh3Slb2/clip64.dll
/8bmdh3Slb2/cred64.dll
/8bmdh3Slb2/scr.dll
/8bmdh3Slb2/scr64.dll
/8bmdh3Slb2/plugins/clip.dll
/8bmdh3Slb2/plugins/cred.dll
/8bmdh3Slb2/plugins/clip64.dll
/8bmdh3Slb2/plugins/cred64.dll
/8bmdh3Slb2/plugins/scr.dll
/8bmdh3Slb2/plugins/scr64.dll
/8bmdh3Slb2/scr.dll
/8bmdh3Slb2/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1604355943545839616
# Reference: https://twitter.com/TrackerC2Bot/status/1604907632388673540

hdbywe.s3.us-west-2.amazonaws.com
/r8Bsje3/index.php
/r8Bsje3/login.php
/r8Bsje3/clip.dll
/r8Bsje3/cred.dll
/r8Bsje3/clip64.dll
/r8Bsje3/cred64.dll
/r8Bsje3/scr.dll
/r8Bsje3/scr64.dll
/r8Bsje3/plugins/clip.dll
/r8Bsje3/plugins/cred.dll
/r8Bsje3/plugins/clip64.dll
/r8Bsje3/plugins/cred64.dll
/r8Bsje3/plugins/scr.dll
/r8Bsje3/plugins/scr64.dll
/tT7774433/index.php
/tT7774433/login.php
/tT7774433/clip.dll
/tT7774433/cred.dll
/tT7774433/clip64.dll
/tT7774433/cred64.dll
/tT7774433/scr.dll
/tT7774433/scr64.dll
/tT7774433/plugins/clip.dll
/tT7774433/plugins/cred.dll
/tT7774433/plugins/clip64.dll
/tT7774433/plugins/cred64.dll
/tT7774433/plugins/scr.dll
/tT7774433/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1605806729274482688

amadtrackings.com
/g9TTnd3bS/index.php
/g9TTnd3bS/login.php
/g9TTnd3bS/clip.dll
/g9TTnd3bS/cred.dll
/g9TTnd3bS/clip64.dll
/g9TTnd3bS/cred64.dll
/g9TTnd3bS/scr.dll
/g9TTnd3bS/scr64.dll
/g9TTnd3bS/plugins/clip.dll
/g9TTnd3bS/plugins/cred.dll
/g9TTnd3bS/plugins/clip64.dll
/g9TTnd3bS/plugins/cred64.dll
/g9TTnd3bS/plugins/scr.dll
/g9TTnd3bS/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1607073854937088003
# Reference: https://www.virustotal.com/gui/file/1e4a3184ab6d646d90670ad84bb487e34af3738d1aeae0abd213f9da5fb05f91/detection

http://62.204.41.145
http://62.204.41.165
http://62.204.41.67
/g8sjnd3xe/index.php
/g8sjnd3xe/login.php
/g8sjnd3xe/clip.dll
/g8sjnd3xe/cred.dll
/g8sjnd3xe/clip64.dll
/g8sjnd3xe/cred64.dll
/g8sjnd3xe/scr.dll
/g8sjnd3xe/scr64.dll
/g8sjnd3xe/plugins/clip.dll
/g8sjnd3xe/plugins/cred.dll
/g8sjnd3xe/plugins/clip64.dll
/g8sjnd3xe/plugins/cred64.dll
/g8sjnd3xe/plugins/scr.dll
/g8sjnd3xe/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1608251690855047169

http://62.204.41.17
/8bdSvcD/index.php
/8bdSvcD/login.php
/8bdSvcD/clip.dll
/8bdSvcD/cred.dll
/8bdSvcD/clip64.dll
/8bdSvcD/cred64.dll
/8bdSvcD/scr.dll
/8bdSvcD/scr64.dll
/8bdSvcD/plugins/clip.dll
/8bdSvcD/plugins/cred.dll
/8bdSvcD/plugins/clip64.dll
/8bdSvcD/plugins/cred64.dll
/8bdSvcD/plugins/scr.dll
/8bdSvcD/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1608704616224489472

http://62.204.41.91
/8kcnjd3da3/index.php
/8kcnjd3da3/login.php
/8kcnjd3da3/clip.dll
/8kcnjd3da3/cred.dll
/8kcnjd3da3/clip.dll
/8kcnjd3da3/cred64.dll
/8kcnjd3da3/scr.dll
/8kcnjd3da3/scr64.dll
/8kcnjd3da3/plugins/clip.dll
/8kcnjd3da3/plugins/cred.dll
/8kcnjd3da3/plugins/clip64.dll
/8kcnjd3da3/plugins/cred64.dll
/8kcnjd3da3/plugins/scr.dll
/8kcnjd3da3/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1608976411426947075
# Reference: https://twitter.com/TrackerC2Bot/status/1613249128590368796

http://62.204.41.109
maximumpushtodaynotnowbut.com
motiontodaynotgogoodnowok.com
sogoodnowtodaynow.com
/Nmkn5d9Dn/index.php
/Nmkn5d9Dn/login.php
/Nmkn5d9Dn/clip.dll
/Nmkn5d9Dn/cred.dll
/Nmkn5d9Dn/clip64.dll
/Nmkn5d9Dn/cred64.dll
/Nmkn5d9Dn/scr.dll
/Nmkn5d9Dn/scr64.dll
/Nmkn5d9Dn/plugins/clip.dll
/Nmkn5d9Dn/plugins/cred.dll
/Nmkn5d9Dn/plugins/clip64.dll
/Nmkn5d9Dn/plugins/cred64.dll
/Nmkn5d9Dn/plugins/scr.dll
/Nmkn5d9Dn/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1609620061567729670

http://45.32.200.113
/mBsjv2swweP/index.php
/mBsjv2swweP/login.php
/mBsjv2swweP/clip.dll
/mBsjv2swweP/cred.dll
/mBsjv2swweP/clip64.dll
/mBsjv2swweP/cred64.dll
/mBsjv2swweP/scr.dll
/mBsjv2swweP/scr64.dll
/mBsjv2swweP/plugins/clip.dll
/mBsjv2swweP/plugins/cred.dll
/mBsjv2swweP/plugins/clip64.dll
/mBsjv2swweP/plugins/cred64.dll
/mBsjv2swweP/plugins/scr.dll
/mBsjv2swweP/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1610788456157806592

http://45.66.230.123
/g8kdkeXs2qL/index.php
/g8kdkeXs2qL/login.php
/g8kdkeXs2qL/clip.dll
/g8kdkeXs2qL/cred.dll
/g8kdkeXs2qL/clip64.dll
/g8kdkeXs2qL/cred64.dll
/g8kdkeXs2qL/scr.dll
/g8kdkeXs2qL/scr64.dll
/g8kdkeXs2qL/plugins/clip.dll
/g8kdkeXs2qL/plugins/cred.dll
/g8kdkeXs2qL/plugins/clip64.dll
/g8kdkeXs2qL/plugins/cred64.dll
/g8kdkeXs2qL/plugins/scr.dll
/g8kdkeXs2qL/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1611071571493359616

http://185.73.39.231

# Reference: https://twitter.com/TrackerC2Bot/status/1610983651176579072

freepcgamee.com

# Reference: https://twitter.com/TrackerC2Bot/status/1612429486099775489

http://62.204.41.104
http://62.204.41.32
/7gjD0Vs3d/index.php
/7gjD0Vs3d/login.php
/7gjD0Vs3d/clip.dll
/7gjD0Vs3d/cred.dll
/7gjD0Vs3d/clip64.dll
/7gjD0Vs3d/cred64.dll
/7gjD0Vs3d/scr.dll
/7gjD0Vs3d/scr64.dll
/7gjD0Vs3d/plugins/clip.dll
/7gjD0Vs3d/plugins/cred.dll
/7gjD0Vs3d/plugins/clip64.dll
/7gjD0Vs3d/plugins/cred64.dll
/7gjD0Vs3d/plugins/scr.dll
/7gjD0Vs3d/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1613143930979192837

http://62.204.41.151
/8vcWxwwx3/index.php
/8vcWxwwx3/login.php
/8vcWxwwx3/clip.dll
/8vcWxwwx3/cred.dll
/8vcWxwwx3/clip64.dll
/8vcWxwwx3/cred64.dll
/8vcWxwwx3/scr.dll
/8vcWxwwx3/scr64.dll
/8vcWxwwx3/plugins/clip.dll
/8vcWxwwx3/plugins/cred.dll
/8vcWxwwx3/plugins/clip64.dll
/8vcWxwwx3/plugins/cred64.dll
/8vcWxwwx3/plugins/scr.dll
/8vcWxwwx3/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1614955898430013440

http://62.204.41.27
/9djZdj09/index.php
/9djZdj09/login.php
/9djZdj09/clip.dll
/9djZdj09/cred.dll
/9djZdj09/clip64.dll
/9djZdj09/cred64.dll
/9djZdj09/scr.dll
/9djZdj09/scr64.dll
/9djZdj09/plugins/clip.dll
/9djZdj09/plugins/cred.dll
/9djZdj09/plugins/clip64.dll
/9djZdj09/plugins/cred64.dll
/9djZdj09/plugins/scr.dll
/9djZdj09/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1617221040127500289

http://62.204.41.242
http://62.204.41.88
hellomr.observer
pleasetake.pictures
researchersgokick.rocks
/7gjD0Vs3d/index.php
/7gjD0Vs3d/login.php
/7gjD0Vs3d/clip.dll
/7gjD0Vs3d/cred.dll
/7gjD0Vs3d/clip64.dll
/7gjD0Vs3d/cred64.dll
/7gjD0Vs3d/scr.dll
/7gjD0Vs3d/scr64.dll
/7gjD0Vs3d/plugins/clip.dll
/7gjD0Vs3d/plugins/cred.dll
/7gjD0Vs3d/plugins/clip64.dll
/7gjD0Vs3d/plugins/cred64.dll
/7gjD0Vs3d/plugins/scr.dll
/7gjD0Vs3d/plugins/scr64.dll
/9vdVVVjsw/index.php
/9vdVVVjsw/login.php
/9vdVVVjsw/clip.dll
/9vdVVVjsw/cred.dll
/9vdVVVjsw/clip64.dll
/9vdVVVjsw/cred64.dll
/9vdVVVjsw/scr.dll
/9vdVVVjsw/scr64.dll
/9vdVVVjsw/plugins/clip.dll
/9vdVVVjsw/plugins/cred.dll
/9vdVVVjsw/plugins/clip64.dll
/9vdVVVjsw/plugins/cred64.dll
/9vdVVVjsw/plugins/scr.dll
/9vdVVVjsw/plugins/scr64.dll
/9vZbns/index.php
/9vZbns/login.php
/9vZbns/clip.dll
/9vZbns/cred.dll
/9vZbns/clip64.dll
/9vZbns/cred64.dll
/9vZbns/scr.dll
/9vZbns/scr64.dll
/9vZbns/plugins/clip.dll
/9vZbns/plugins/cred.dll
/9vZbns/plugins/clip64.dll
/9vZbns/plugins/cred64.dll
/9vZbns/plugins/scr.dll
/9vZbns/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1615499737519513601

http://62.204.41.111
http://62.204.41.121
/jb9sZZZbv7/index.php
/jb9sZZZbv7/login.php
/jb9sZZZbv7/clip.dll
/jb9sZZZbv7/cred.dll
/jb9sZZZbv7/clip64.dll
/jb9sZZZbv7/cred64.dll
/jb9sZZZbv7/scr.dll
/jb9sZZZbv7/scr64.dll
/jb9sZZZbv7/plugins/clip.dll
/jb9sZZZbv7/plugins/cred.dll
/jb9sZZZbv7/plugins/clip64.dll
/jb9sZZZbv7/plugins/cred64.dll
/jb9sZZZbv7/plugins/scr.dll
/jb9sZZZbv7/plugins/scr64.dll
/ZxhssZx/index.php
/ZxhssZx/login.php
/ZxhssZx/clip.dll
/ZxhssZx/cred.dll
/ZxhssZx/clip64.dll
/ZxhssZx/cred64.dll
/ZxhssZx/scr.dll
/ZxhssZx/scr64.dll
/ZxhssZx/plugins/clip.dll
/ZxhssZx/plugins/cred.dll
/ZxhssZx/plugins/clip64.dll
/ZxhssZx/plugins/cred64.dll
/ZxhssZx/plugins/scr.dll
/ZxhssZx/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/17803e8bd7a01054cbbe8b8a61b74eb56ca7c70f305b72f6d9230b53dffe703e/detection

allaboutdogstraining.com
msedgewebview2.ru
sysinternals.wf

# Reference: https://twitter.com/neonprimetime/status/1626323666748276739
# Reference: https://www.joesandbox.com/analysis/808971/0/html

http://193.233.20.2
/Bn89hku/index.php
/Bn89hku/login.php
/Bn89hku/clip.dll
/Bn89hku/cred.dll
/Bn89hku/clip64.dll
/Bn89hku/cred64.dll
/Bn89hku/scr.dll
/Bn89hku/scr64.dll
/Bn89hku/plugins/clip.dll
/Bn89hku/plugins/cred.dll
/Bn89hku/plugins/clip64.dll
/Bn89hku/plugins/cred64.dll
/Bn89hku/plugins/scr.dll
/Bn89hku/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1617589543800012811

http://83.217.11.7

# Reference: https://twitter.com/TrackerC2Bot/status/1621396682020724737

http://193.233.20.4
/t6r48nSa/index.php
/t6r48nSa/login.php
/t6r48nSa/clip.dll
/t6r48nSa/cred.dll
/t6r48nSa/clip64.dll
/t6r48nSa/cred64.dll
/t6r48nSa/scr.dll
/t6r48nSa/scr64.dll
/t6r48nSa/plugins/clip.dll
/t6r48nSa/plugins/cred.dll
/t6r48nSa/plugins/clip64.dll
/t6r48nSa/plugins/cred64.dll
/t6r48nSa/plugins/scr.dll
/t6r48nSa/plugins/scr64.dll

# Reference: https://twitter.com/TrackerC2Bot/status/1621569575853629441

http://62.204.41.4
http://62.204.41.5
/Bu58Ngs/index.php
/Bu58Ngs/login.php
/Bu58Ngs/clip.dll
/Bu58Ngs/cred.dll
/Bu58Ngs/clip64.dll
/Bu58Ngs/cred64.dll
/Bu58Ngs/scr.dll
/Bu58Ngs/scr64.dll
/Bu58Ngs/plugins/clip.dll
/Bu58Ngs/plugins/cred.dll
/Bu58Ngs/plugins/clip64.dll
/Bu58Ngs/plugins/cred64.dll
/Bu58Ngs/plugins/scr.dll
/Bu58Ngs/plugins/scr64.dll
/Gol478Ns/index.php
/Gol478Ns/login.php
/Gol478Ns/clip.dll
/Gol478Ns/cred.dll
/Gol478Ns/clip64.dll
/Gol478Ns/cred64.dll
/Gol478Ns/scr.dll
/Gol478Ns/scr64.dll
/Gol478Ns/plugins/clip.dll
/Gol478Ns/plugins/cred.dll
/Gol478Ns/plugins/clip64.dll
/Gol478Ns/plugins/cred64.dll
/Gol478Ns/plugins/scr.dll
/Gol478Ns/plugins/scr64.dll

# Reference: https://twitter.com/wwp96/status/1627450091383717888

http://192.211.55.118
/h9sk3jdSda/index.php
/h9sk3jdSda/login.php
/h9sk3jdSda/clip.dll
/h9sk3jdSda/cred.dll
/h9sk3jdSda/clip64.dll
/h9sk3jdSda/cred64.dll
/h9sk3jdSda/scr.dll
/h9sk3jdSda/scr64.dll
/h9sk3jdSda/plugins/clip.dll
/h9sk3jdSda/plugins/cred.dll
/h9sk3jdSda/plugins/clip64.dll
/h9sk3jdSda/plugins/cred64.dll
/h9sk3jdSda/plugins/scr.dll
/h9sk3jdSda/plugins/scr64.dll

# Reference: https://twitter.com/wwp96/status/1628127461509836800

http://193.233.20.15
/dF30Hn4m/index.php
/dF30Hn4m/login.php
/dF30Hn4m/clip.dll
/dF30Hn4m/cred.dll
/dF30Hn4m/clip64.dll
/dF30Hn4m/cred64.dll
/dF30Hn4m/scr.dll
/dF30Hn4m/scr64.dll
/dF30Hn4m/plugins/clip.dll
/dF30Hn4m/plugins/cred.dll
/dF30Hn4m/plugins/clip64.dll
/dF30Hn4m/plugins/cred64.dll
/dF30Hn4m/plugins/scr.dll
/dF30Hn4m/plugins/scr64.dll

# Reference: https://twitter.com/wwp96/status/1628272397550858241

http://193.233.20.14
/BR54nmB3/index.php
/BR54nmB3/login.php
/BR54nmB3/clip.dll
/BR54nmB3/cred.dll
/BR54nmB3/clip64.dll
/BR54nmB3/cred64.dll
/BR54nmB3/scr.dll
/BR54nmB3/scr64.dll
/BR54nmB3/plugins/clip.dll
/BR54nmB3/plugins/cred.dll
/BR54nmB3/plugins/clip64.dll
/BR54nmB3/plugins/cred64.dll
/BR54nmB3/plugins/scr.dll
/BR54nmB3/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/96910d4cde5d93e92d937f4ef28057e61846a6d7e4aa569d719185b892c16bd0/detection

cracked23.site

# Reference: https://twitter.com/wwp96/status/1632153069508255745
# Reference: https://app.any.run/tasks/79191c65-4667-4c25-8500-5a0a642ef23f/

http://193.233.20.25
/buH5N004d/index.php
/buH5N004d/login.php
/buH5N004d/clip.dll
/buH5N004d/cred.dll
/buH5N004d/clip64.dll
/buH5N004d/cred64.dll
/buH5N004d/scr.dll
/buH5N004d/scr64.dll
/buH5N004d/plugins/clip.dll
/buH5N004d/plugins/cred.dll
/buH5N004d/plugins/clip64.dll
/buH5N004d/plugins/cred64.dll
/buH5N004d/plugins/scr.dll
/buH5N004d/plugins/scr64.dll

# Reference: https://twitter.com/wwp96/status/1632901486165512192

http://193.233.20.26
/Do3m4Gor/index.php
/Do3m4Gor/login.php
/Do3m4Gor/clip.dll
/Do3m4Gor/cred.dll
/Do3m4Gor/clip64.dll
/Do3m4Gor/cred64.dll
/Do3m4Gor/scr.dll
/Do3m4Gor/scr64.dll
/Do3m4Gor/plugins/clip.dll
/Do3m4Gor/plugins/cred.dll
/Do3m4Gor/plugins/clip64.dll
/Do3m4Gor/plugins/cred64.dll
/Do3m4Gor/plugins/scr.dll
/Do3m4Gor/plugins/scr64.dll

# Reference: https://twitter.com/josh_penny/status/1633204267354845189
# Reference: https://twitter.com/0xToxin/status/1637786881780850688
# Reference: https://tria.ge/230320-lekscscg39

http://78.46.242.112
nestlecareers.cf
nestlehosts.xyz
nestleservers.xyz
/so57Nst/index.php
/so57Nst/login.php
/so57Nst/clip.dll
/so57Nst/cred.dll
/so57Nst/clip64.dll
/so57Nst/cred64.dll
/so57Nst/scr.dll
/so57Nst/scr64.dll
/so57Nst/plugins/clip.dll
/so57Nst/plugins/cred.dll
/so57Nst/plugins/clip64.dll
/so57Nst/plugins/cred64.dll
/so57Nst/plugins/scr.dll
/so57Nst/plugins/scr64.dll

# Reference: https://twitter.com/Gi7w0rm/status/1633407356737314821

specialblue.in
/dF30Hn4m/index.php
/dF30Hn4m/login.php
/dF30Hn4m/clip.dll
/dF30Hn4m/cred.dll
/dF30Hn4m/clip64.dll
/dF30Hn4m/cred64.dll
/dF30Hn4m/scr.dll
/dF30Hn4m/scr64.dll
/dF30Hn4m/plugins/clip.dll
/dF30Hn4m/plugins/cred.dll
/dF30Hn4m/plugins/clip64.dll
/dF30Hn4m/plugins/cred64.dll
/dF30Hn4m/plugins/scr.dll
/dF30Hn4m/plugins/scr64.dll

# Reference: https://twitter.com/Gi7w0rm/status/1633851568482054146
# Reference: https://tria.ge/230309-q5fnjsbf2s

http://213.226.123.14
/jd93d22Cb1/index.php
/jd93d22Cb1/login.php
/jd93d22Cb1/clip.dll
/jd93d22Cb1/cred.dll
/jd93d22Cb1/clip64.dll
/jd93d22Cb1/cred64.dll
/jd93d22Cb1/scr.dll
/jd93d22Cb1/scr64.dll
/jd93d22Cb1/plugins/clip.dll
/jd93d22Cb1/plugins/cred.dll
/jd93d22Cb1/plugins/clip64.dll
/jd93d22Cb1/plugins/cred64.dll
/jd93d22Cb1/plugins/scr.dll
/jd93d22Cb1/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/d304ea7b8daa8e48e8c0ab3506bb8e5ae12c95fa4e009118acbf1e99f240a51e/detection

http://62.204.41.87
/joomla/clip.dll
/joomla/cred.dll
/joomla/clip64.dll
/joomla/cred64.dll
/joomla/scr.dll
/joomla/scr64.dll
/joomla/plugins/clip.dll
/joomla/plugins/cred.dll
/joomla/plugins/clip64.dll
/joomla/plugins/cred64.dll
/joomla/plugins/scr.dll
/joomla/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/0efc37cca6f7e2b5405daf5431a093ae479527635ab2cd64b1e9a582a4095ffe/detection

http://88.218.60.230
/7vzZwkv2/index.php
/7vzZwkv2/login.php
/7vzZwkv2/clip.dll
/7vzZwkv2/clip64.dll
/7vzZwkv2/cred.dll
/7vzZwkv2/cred64.dll
/7vzZwkv2/scr.dll
/7vzZwkv2/scr64.dll
/7vzZwkv2/plugins/clip.dll
/7vzZwkv2/plugins/clip64.dll
/7vzZwkv2/plugins/cred.dll
/7vzZwkv2/plugins/cred64.dll
/7vzZwkv2/plugins/scr.dll
/7vzZwkv2/plugins/scr64.dll

# Reference: https://twitter.com/0xperator/status/1644500348713697281

http://213.226.123.16
/4dvHbs3/clip.dll
/4dvHbs3/cred.dll
/4dvHbs3/clip64.dll
/4dvHbs3/cred64.dll
/4dvHbs3/index.php
/4dvHbs3/login.php
/4dvHbs3/plugins/clip.dll
/4dvHbs3/plugins/clip64.dll
/4dvHbs3/plugins/cred.dll
/4dvHbs3/plugins/cred64.dll
/4dvHbs3/plugins/scr.dll
/4dvHbs3/plugins/scr64.dll
/4dvHbs3/scr.dll
/4dvHbs3/scr64.dll

# Reference: https://medium.com/checkmarx-security/who-broke-npm-malicious-packages-flood-leading-to-denial-of-service-77ac707ddbf1

http://193.233.20.29
/games/category/Plugins/clip.dll
/games/category/Plugins/clip64.dll
/games/category/Plugins/cred.dll
/games/category/Plugins/cred64.dll
/games/category/Plugins/scr.dll
/games/category/Plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/004a6e8d21b1be8d1cc09731b226233dccc23d5192946a2e98262aa4aee92ef3/detection

cdnhongkong.cc
looksmiles.com
server13.cdneurops.pics

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/

http://141.136.0.130
http://155.94.128.40
http://176.111.174.114
http://176.113.115.201
http://179.43.154.147
http://179.43.155.137
http://185.174.137.152
http://185.215.113.110
http://185.215.113.118
http://185.215.113.202
http://185.215.113.205
http://185.215.113.206
http://185.215.113.33
http://185.215.113.35
http://185.215.113.42
http://185.215.113.53
http://185.215.113.64
http://185.215.113.67
http://185.215.113.92
http://185.87.148.190
http://185.87.51.18
http://193.106.191.184
http://193.233.20.29
http://193.233.20.36
http://193.42.33.43
http://193.42.33.74
http://193.56.146.218
http://193.56.146.243
http://194.36.177.12
http://194.58.103.2
http://199.188.204.245
http://2.56.56.210
http://210.16.67.250
http://212.118.43.106
http://213.226.123.16
http://31.41.244.146
http://31.41.244.167
http://31.41.244.17
http://31.41.244.200
http://31.41.244.237
http://37.220.87.85
http://45.15.156.216
http://45.9.74.80
http://46.17.96.36
http://49.12.117.51
http://5.182.4.47
http://5.188.118.7
http://5.75.139.35
http://62.204.41.117
http://62.204.41.174
http://62.204.41.59
http://62.204.41.72
http://62.204.41.89
http://62.204.41.92
http://62.233.51.173
http://77.73.133.124
http://77.73.134.42
http://77.73.134.52
http://77.73.134.65
http://77.73.134.66
http://77.91.124.207
http://77.91.124.242
http://77.91.78.118
http://77.91.78.17
http://78.153.144.60
http://79.137.192.6
http://79.137.197.181
http://80.94.92.35
http://81.19.135.247
http://85.209.135.109
http://85.209.135.11
http://85.31.45.199
http://85.31.46.155
http://89.163.249.231
http://91.215.85.194
http://91.241.19.101
http://92.38.184.216
http://94.140.115.230
http://94.140.115.70
http://94.142.138.182
900ama.com
ama529.ru
amazingtodaynotsaidhimherwhathe.com
antispam-screen.com
azd.at
bebraboysclub.hk
bitcoinpricealertexpert.com
cloudreactions.xyz
coindexalerter.com
crmgloinx.com
css.tipinfolist.xyz
depressionk1d.ug
dhisa8f9ah02hopasiaf.com
dssclientdownloadsprospect.com
eiqwejwqiejqwij.com
epifile.info
eu.eredirected.xyz
eu.xml-post.xyz
feralhendown.xyz
file-manager-7946.com
focustopbreed78d.com
freshjuss.com
gitextensions.org
github.gitextensions.org
guideanceers.com
haleyqueenfff.xyz
haleyqueenffff.xyz
heso-vpn.ug
huteuhksr.icu
kkskksnut.icu
loader.cyou
marobast.ws
msupgrade.top
nodfirewalld.org
pppproyectkz.icu
purchatewow.xyz
rebreaksstonehen.at
redteamminepool.ug
rupeika.info
search.akamainet.org
sertvs.com
sigint.ws
smkpro.to
soul-kissed.org
speeduppercolatorl.at
sunnsongs.com
systemupdate22.cf
teamfighttacticstools.info
tech-unions.com
tipinfolist.xyz
trustmanager.ug
umbrelladownload.uno
uniswapdataprice.com
update.nodfirewalld.org
vastyrannouse.at
wecrack.su
x-vpn.ug
xksldjf9sksdjfks.com
/0jVu73d/clip.dll
/0jVu73d/cred.dll
/0jVu73d/clip64.dll
/0jVu73d/cred64.dll
/0jVu73d/index.php
/0jVu73d/login.php
/0jVu73d/plugins/clip.dll
/0jVu73d/plugins/clip64.dll
/0jVu73d/plugins/cred.dll
/0jVu73d/plugins/cred64.dll
/0jVu73d/plugins/scr.dll
/0jVu73d/plugins/scr64.dll
/0jVu73d/scr.dll
/0jVu73d/scr64.dll
/4dvHbs3/clip.dll
/4dvHbs3/cred.dll
/4dvHbs3/clip64.dll
/4dvHbs3/cred64.dll
/4dvHbs3/index.php
/4dvHbs3/login.php
/4dvHbs3/plugins/clip.dll
/4dvHbs3/plugins/clip64.dll
/4dvHbs3/plugins/cred.dll
/4dvHbs3/plugins/cred64.dll
/4dvHbs3/plugins/scr.dll
/4dvHbs3/plugins/scr64.dll
/4dvHbs3/scr.dll
/4dvHbs3/scr64.dll
/8bcZfjw/clip.dll
/8bcZfjw/cred.dll
/8bcZfjw/clip64.dll
/8bcZfjw/cred64.dll
/8bcZfjw/index.php
/8bcZfjw/login.php
/8bcZfjw/plugins/clip.dll
/8bcZfjw/plugins/clip64.dll
/8bcZfjw/plugins/cred.dll
/8bcZfjw/plugins/cred64.dll
/8bcZfjw/plugins/scr.dll
/8bcZfjw/plugins/scr64.dll
/8bcZfjw/scr.dll
/8bcZfjw/scr64.dll
/G9qpzLe/clip.dll
/G9qpzLe/cred.dll
/G9qpzLe/clip64.dll
/G9qpzLe/cred64.dll
/G9qpzLe/index.php
/G9qpzLe/login.php
/G9qpzLe/plugins/clip.dll
/G9qpzLe/plugins/clip64.dll
/G9qpzLe/plugins/cred.dll
/G9qpzLe/plugins/cred64.dll
/G9qpzLe/plugins/scr.dll
/G9qpzLe/plugins/scr64.dll
/G9qpzLe/scr.dll
/G9qpzLe/scr64.dll
/Hnq8vS/clip.dll
/Hnq8vS/cred.dll
/Hnq8vS/clip64.dll
/Hnq8vS/cred64.dll
/Hnq8vS/index.php
/Hnq8vS/login.php
/Hnq8vS/plugins/clip.dll
/Hnq8vS/plugins/clip64.dll
/Hnq8vS/plugins/cred.dll
/Hnq8vS/plugins/cred64.dll
/Hnq8vS/plugins/scr.dll
/Hnq8vS/plugins/scr64.dll
/Hnq8vS/scr.dll
/Hnq8vS/scr64.dll
/Kn82d22zzU/clip.dll
/Kn82d22zzU/cred.dll
/Kn82d22zzU/clip64.dll
/Kn82d22zzU/cred64.dll
/Kn82d22zzU/index.php
/Kn82d22zzU/login.php
/Kn82d22zzU/plugins/clip.dll
/Kn82d22zzU/plugins/clip64.dll
/Kn82d22zzU/plugins/cred.dll
/Kn82d22zzU/plugins/cred64.dll
/Kn82d22zzU/plugins/scr.dll
/Kn82d22zzU/plugins/scr64.dll
/Kn82d22zzU/scr.dll
/Kn82d22zzU/scr64.dll
/PmVc3sOf/clip.dll
/PmVc3sOf/cred.dll
/PmVc3sOf/clip64.dll
/PmVc3sOf/cred64.dll
/PmVc3sOf/index.php
/PmVc3sOf/login.php
/PmVc3sOf/plugins/clip.dll
/PmVc3sOf/plugins/clip64.dll
/PmVc3sOf/plugins/cred.dll
/PmVc3sOf/plugins/cred64.dll
/PmVc3sOf/plugins/scr.dll
/PmVc3sOf/plugins/scr64.dll
/PmVc3sOf/scr.dll
/PmVc3sOf/scr64.dll
/PmVc3sOf/clip.dll
/PmVc3sOf/cred.dll
/PmVc3sOf/clip64.dll
/PmVc3sOf/cred64.dll
/PmVc3sOf/index.php
/PmVc3sOf/login.php
/PmVc3sOf/plugins/clip.dll
/PmVc3sOf/plugins/clip64.dll
/PmVc3sOf/plugins/cred.dll
/PmVc3sOf/plugins/cred64.dll
/PmVc3sOf/plugins/scr.dll
/PmVc3sOf/plugins/scr64.dll
/PmVc3sOf/scr.dll
/PmVc3sOf/scr64.dll
/d2VxjasuwS_old/clip.dll
/d2VxjasuwS_old/cred.dll
/d2VxjasuwS_old/clip64.dll
/d2VxjasuwS_old/cred64.dll
/d2VxjasuwS_old/index.php
/d2VxjasuwS_old/login.php
/d2VxjasuwS_old/plugins/clip.dll
/d2VxjasuwS_old/plugins/clip64.dll
/d2VxjasuwS_old/plugins/cred.dll
/d2VxjasuwS_old/plugins/cred64.dll
/d2VxjasuwS_old/plugins/scr.dll
/d2VxjasuwS_old/plugins/scr64.dll
/d2VxjasuwS_old/scr.dll
/d2VxjasuwS_old/scr64.dll
/f5OknW/clip.dll
/f5OknW/cred.dll
/f5OknW/clip64.dll
/f5OknW/cred64.dll
/f5OknW/index.php
/f5OknW/login.php
/f5OknW/plugins/clip.dll
/f5OknW/plugins/clip64.dll
/f5OknW/plugins/cred.dll
/f5OknW/plugins/cred64.dll
/f5OknW/plugins/scr.dll
/f5OknW/plugins/scr64.dll
/f5OknW/scr.dll
/f5OknW/scr64.dll
/f6vskbW/clip.dll
/f6vskbW/cred.dll
/f6vskbW/clip64.dll
/f6vskbW/cred64.dll
/f6vskbW/index.php
/f6vskbW/login.php
/f6vskbW/plugins/clip.dll
/f6vskbW/plugins/clip64.dll
/f6vskbW/plugins/cred.dll
/f6vskbW/plugins/cred64.dll
/f6vskbW/plugins/scr.dll
/f6vskbW/plugins/scr64.dll
/f6vskbW/scr.dll
/f6vskbW/scr64.dll
/f9v33dkSXm/clip.dll
/f9v33dkSXm/cred.dll
/f9v33dkSXm/clip64.dll
/f9v33dkSXm/cred64.dll
/f9v33dkSXm/index.php
/f9v33dkSXm/login.php
/f9v33dkSXm/plugins/clip.dll
/f9v33dkSXm/plugins/clip64.dll
/f9v33dkSXm/plugins/cred.dll
/f9v33dkSXm/plugins/cred64.dll
/f9v33dkSXm/plugins/scr.dll
/f9v33dkSXm/plugins/scr64.dll
/f9v33dkSXm/scr.dll
/f9v33dkSXm/scr64.dll
/fT5YhO/clip.dll
/fT5YhO/cred.dll
/fT5YhO/clip64.dll
/fT5YhO/cred64.dll
/fT5YhO/index.php
/fT5YhO/login.php
/fT5YhO/plugins/clip.dll
/fT5YhO/plugins/clip64.dll
/fT5YhO/plugins/cred.dll
/fT5YhO/plugins/cred64.dll
/fT5YhO/plugins/scr.dll
/fT5YhO/plugins/scr64.dll
/fT5YhO/scr.dll
/fT5YhO/scr64.dll
/fjgD555c3/clip.dll
/fjgD555c3/cred.dll
/fjgD555c3/clip64.dll
/fjgD555c3/cred64.dll
/fjgD555c3/index.php
/fjgD555c3/login.php
/fjgD555c3/plugins/clip.dll
/fjgD555c3/plugins/clip64.dll
/fjgD555c3/plugins/cred.dll
/fjgD555c3/plugins/cred64.dll
/fjgD555c3/plugins/scr.dll
/fjgD555c3/plugins/scr64.dll
/fjgD555c3/scr.dll
/fjgD555c3/scr64.dll
/g0fMLjb8s/clip.dll
/g0fMLjb8s/cred.dll
/g0fMLjb8s/clip64.dll
/g0fMLjb8s/cred64.dll
/g0fMLjb8s/index.php
/g0fMLjb8s/login.php
/g0fMLjb8s/plugins/clip.dll
/g0fMLjb8s/plugins/clip64.dll
/g0fMLjb8s/plugins/cred.dll
/g0fMLjb8s/plugins/cred64.dll
/g0fMLjb8s/plugins/scr.dll
/g0fMLjb8s/plugins/scr64.dll
/g0fMLjb8s/scr.dll
/g0fMLjb8s/scr64.dll
/g7vcSfkbDs2/clip.dll
/g7vcSfkbDs2/cred.dll
/g7vcSfkbDs2/clip64.dll
/g7vcSfkbDs2/cred64.dll
/g7vcSfkbDs2/index.php
/g7vcSfkbDs2/login.php
/g7vcSfkbDs2/plugins/clip.dll
/g7vcSfkbDs2/plugins/clip64.dll
/g7vcSfkbDs2/plugins/cred.dll
/g7vcSfkbDs2/plugins/cred64.dll
/g7vcSfkbDs2/plugins/scr.dll
/g7vcSfkbDs2/plugins/scr64.dll
/g7vcSfkbDs2/scr.dll
/g7vcSfkbDs2/scr64.dll
/g93dLhG2/clip.dll
/g93dLhG2/cred.dll
/g93dLhG2/clip64.dll
/g93dLhG2/cred64.dll
/g93dLhG2/index.php
/g93dLhG2/login.php
/g93dLhG2/plugins/clip.dll
/g93dLhG2/plugins/clip64.dll
/g93dLhG2/plugins/cred.dll
/g93dLhG2/plugins/cred64.dll
/g93dLhG2/plugins/scr.dll
/g93dLhG2/plugins/scr64.dll
/g93dLhG2/scr.dll
/g93dLhG2/scr64.dll
/game0ver/clip.dll
/game0ver/cred.dll
/game0ver/clip64.dll
/game0ver/cred64.dll
/game0ver/index.php
/game0ver/login.php
/game0ver/plugins/clip.dll
/game0ver/plugins/clip64.dll
/game0ver/plugins/cred.dll
/game0ver/plugins/cred64.dll
/game0ver/plugins/scr.dll
/game0ver/plugins/scr64.dll
/game0ver/scr.dll
/game0ver/scr64.dll
/h8V2cQlbd3/clip.dll
/h8V2cQlbd3/cred.dll
/h8V2cQlbd3/clip64.dll
/h8V2cQlbd3/cred64.dll
/h8V2cQlbd3/index.php
/h8V2cQlbd3/login.php
/h8V2cQlbd3/plugins/clip.dll
/h8V2cQlbd3/plugins/clip64.dll
/h8V2cQlbd3/plugins/cred.dll
/h8V2cQlbd3/plugins/cred64.dll
/h8V2cQlbd3/plugins/scr.dll
/h8V2cQlbd3/plugins/scr64.dll
/h8V2cQlbd3/scr.dll
/h8V2cQlbd3/scr64.dll
/hn85jlUn/clip.dll
/hn85jlUn/cred.dll
/hn85jlUn/clip64.dll
/hn85jlUn/cred64.dll
/hn85jlUn/index.php
/hn85jlUn/login.php
/hn85jlUn/plugins/clip.dll
/hn85jlUn/plugins/clip64.dll
/hn85jlUn/plugins/cred.dll
/hn85jlUn/plugins/cred64.dll
/hn85jlUn/plugins/scr.dll
/hn85jlUn/plugins/scr64.dll
/hn85jlUn/scr.dll
/hn85jlUn/scr64.dll
/hr4CsXqlF/clip.dll
/hr4CsXqlF/cred.dll
/hr4CsXqlF/clip64.dll
/hr4CsXqlF/cred64.dll
/hr4CsXqlF/index.php
/hr4CsXqlF/login.php
/hr4CsXqlF/plugins/clip.dll
/hr4CsXqlF/plugins/clip64.dll
/hr4CsXqlF/plugins/cred.dll
/hr4CsXqlF/plugins/cred64.dll
/hr4CsXqlF/plugins/scr.dll
/hr4CsXqlF/plugins/scr64.dll
/hr4CsXqlF/scr.dll
/hr4CsXqlF/scr64.dll
/k8FppT/clip.dll
/k8FppT/cred.dll
/k8FppT/clip64.dll
/k8FppT/cred64.dll
/k8FppT/index.php
/k8FppT/login.php
/k8FppT/plugins/clip.dll
/k8FppT/plugins/clip64.dll
/k8FppT/plugins/cred.dll
/k8FppT/plugins/cred64.dll
/k8FppT/plugins/scr.dll
/k8FppT/plugins/scr64.dll
/k8FppT/scr.dll
/k8FppT/scr64.dll
/n9dks3s/clip.dll
/n9dks3s/cred.dll
/n9dks3s/clip64.dll
/n9dks3s/cred64.dll
/n9dks3s/index.php
/n9dks3s/login.php
/n9dks3s/plugins/clip.dll
/n9dks3s/plugins/clip64.dll
/n9dks3s/plugins/cred.dll
/n9dks3s/plugins/cred64.dll
/n9dks3s/plugins/scr.dll
/n9dks3s/plugins/scr64.dll
/n9dks3s/scr.dll
/n9dks3s/scr64.dll
/n9kdjc3xSf/clip.dll
/n9kdjc3xSf/cred.dll
/n9kdjc3xSf/clip64.dll
/n9kdjc3xSf/cred64.dll
/n9kdjc3xSf/index.php
/n9kdjc3xSf/login.php
/n9kdjc3xSf/plugins/clip.dll
/n9kdjc3xSf/plugins/clip64.dll
/n9kdjc3xSf/plugins/cred.dll
/n9kdjc3xSf/plugins/cred64.dll
/n9kdjc3xSf/plugins/scr.dll
/n9kdjc3xSf/plugins/scr64.dll
/n9kdjc3xSf/scr.dll
/n9kdjc3xSf/scr64.dll
/nkg3skjvSaq2/clip.dll
/nkg3skjvSaq2/cred.dll
/nkg3skjvSaq2/clip64.dll
/nkg3skjvSaq2/cred64.dll
/nkg3skjvSaq2/index.php
/nkg3skjvSaq2/login.php
/nkg3skjvSaq2/plugins/clip.dll
/nkg3skjvSaq2/plugins/clip64.dll
/nkg3skjvSaq2/plugins/cred.dll
/nkg3skjvSaq2/plugins/cred64.dll
/nkg3skjvSaq2/plugins/scr.dll
/nkg3skjvSaq2/plugins/scr64.dll
/nkg3skjvSaq2/scr.dll
/nkg3skjvSaq2/scr64.dll
/notAnoob/clip.dll
/notAnoob/cred.dll
/notAnoob/clip64.dll
/notAnoob/cred64.dll
/notAnoob/index.php
/notAnoob/login.php
/notAnoob/plugins/clip.dll
/notAnoob/plugins/clip64.dll
/notAnoob/plugins/cred.dll
/notAnoob/plugins/cred64.dll
/notAnoob/plugins/scr.dll
/notAnoob/plugins/scr64.dll
/notAnoob/scr.dll
/notAnoob/scr64.dll
/o7Vsjd3a2f/clip.dll
/o7Vsjd3a2f/cred.dll
/o7Vsjd3a2f/clip64.dll
/o7Vsjd3a2f/cred64.dll
/o7Vsjd3a2f/index.php
/o7Vsjd3a2f/login.php
/o7Vsjd3a2f/plugins/clip.dll
/o7Vsjd3a2f/plugins/clip64.dll
/o7Vsjd3a2f/plugins/cred.dll
/o7Vsjd3a2f/plugins/cred64.dll
/o7Vsjd3a2f/plugins/scr.dll
/o7Vsjd3a2f/plugins/scr64.dll
/o7Vsjd3a2f/scr.dll
/o7Vsjd3a2f/scr64.dll
/o7VsjdSa2f/clip.dll
/o7VsjdSa2f/cred.dll
/o7VsjdSa2f/clip64.dll
/o7VsjdSa2f/cred64.dll
/o7VsjdSa2f/index.php
/o7VsjdSa2f/login.php
/o7VsjdSa2f/plugins/clip.dll
/o7VsjdSa2f/plugins/clip64.dll
/o7VsjdSa2f/plugins/cred.dll
/o7VsjdSa2f/plugins/cred64.dll
/o7VsjdSa2f/plugins/scr.dll
/o7VsjdSa2f/plugins/scr64.dll
/o7VsjdSa2f/scr.dll
/o7VsjdSa2f/scr64.dll
/p84Nls2/clip.dll
/p84Nls2/cred.dll
/p84Nls2/clip64.dll
/p84Nls2/cred64.dll
/p84Nls2/index.php
/p84Nls2/login.php
/p84Nls2/plugins/clip.dll
/p84Nls2/plugins/clip64.dll
/p84Nls2/plugins/cred.dll
/p84Nls2/plugins/cred64.dll
/p84Nls2/plugins/scr.dll
/p84Nls2/plugins/scr64.dll
/p84Nls2/scr.dll
/p84Nls2/scr64.dll
/ppp3aZfj3nil/clip.dll
/ppp3aZfj3nil/cred.dll
/ppp3aZfj3nil/clip64.dll
/ppp3aZfj3nil/cred64.dll
/ppp3aZfj3nil/index.php
/ppp3aZfj3nil/login.php
/ppp3aZfj3nil/plugins/clip.dll
/ppp3aZfj3nil/plugins/clip64.dll
/ppp3aZfj3nil/plugins/cred.dll
/ppp3aZfj3nil/plugins/cred64.dll
/ppp3aZfj3nil/plugins/scr.dll
/ppp3aZfj3nil/plugins/scr64.dll
/ppp3aZfj3nil/scr.dll
/ppp3aZfj3nil/scr64.dll
/rSbFldr23/clip.dll
/rSbFldr23/cred.dll
/rSbFldr23/clip64.dll
/rSbFldr23/cred64.dll
/rSbFldr23/index.php
/rSbFldr23/login.php
/rSbFldr23/plugins/clip.dll
/rSbFldr23/plugins/clip64.dll
/rSbFldr23/plugins/cred.dll
/rSbFldr23/plugins/cred64.dll
/rSbFldr23/plugins/scr.dll
/rSbFldr23/plugins/scr64.dll
/rSbFldr23/scr.dll
/rSbFldr23/scr64.dll
/u83mfdS2/clip.dll
/u83mfdS2/cred.dll
/u83mfdS2/clip64.dll
/u83mfdS2/cred64.dll
/u83mfdS2/index.php
/u83mfdS2/login.php
/u83mfdS2/plugins/clip.dll
/u83mfdS2/plugins/clip64.dll
/u83mfdS2/plugins/cred.dll
/u83mfdS2/plugins/cred64.dll
/u83mfdS2/plugins/scr.dll
/u83mfdS2/plugins/scr64.dll
/u83mfdS2/scr.dll
/u83mfdS2/scr64.dll
/v3S1dl2/clip.dll
/v3S1dl2/cred.dll
/v3S1dl2/clip64.dll
/v3S1dl2/cred64.dll
/v3S1dl2/index.php
/v3S1dl2/login.php
/v3S1dl2/plugins/clip.dll
/v3S1dl2/plugins/clip64.dll
/v3S1dl2/plugins/cred.dll
/v3S1dl2/plugins/cred64.dll
/v3S1dl2/plugins/scr.dll
/v3S1dl2/plugins/scr64.dll
/v3S1dl2/scr.dll
/v3S1dl2/scr64.dll
/v7eWcjs/clip.dll
/v7eWcjs/cred.dll
/v7eWcjs/clip64.dll
/v7eWcjs/cred64.dll
/v7eWcjs/index.php
/v7eWcjs/login.php
/v7eWcjs/plugins/clip.dll
/v7eWcjs/plugins/clip64.dll
/v7eWcjs/plugins/cred.dll
/v7eWcjs/plugins/cred64.dll
/v7eWcjs/plugins/scr.dll
/v7eWcjs/plugins/scr64.dll
/v7eWcjs/scr.dll
/v7eWcjs/scr64.dll

# Reference: https://twitter.com/Gi7w0rm/status/1645502055094657031

http://179.43.154.148
http://77.73.134.15
http://77.91.78.242

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/blob/main/amadey/txt/amadey_panels_11_04_2023.txt

http://193.201.9.43
http://80.66.79.86
specialblue.pm
/Gb2dZz/clip.dll
/Gb2dZz/cred.dll
/Gb2dZz/clip64.dll
/Gb2dZz/cred64.dll
/Gb2dZz/index.php
/Gb2dZz/login.php
/Gb2dZz/plugins/clip.dll
/Gb2dZz/plugins/clip64.dll
/Gb2dZz/plugins/cred.dll
/Gb2dZz/plugins/cred64.dll
/Gb2dZz/plugins/scr.dll
/Gb2dZz/plugins/scr64.dll
/Gb2dZz/scr.dll
/Gb2dZz/scr64.dll
/ve83dkas2m/clip.dll
/ve83dkas2m/cred.dll
/ve83dkas2m/clip64.dll
/ve83dkas2m/cred64.dll
/ve83dkas2m/index.php
/ve83dkas2m/login.php
/ve83dkas2m/plugins/clip.dll
/ve83dkas2m/plugins/clip64.dll
/ve83dkas2m/plugins/cred.dll
/ve83dkas2m/plugins/cred64.dll
/ve83dkas2m/plugins/scr.dll
/ve83dkas2m/plugins/scr64.dll
/ve83dkas2m/scr.dll
/ve83dkas2m/scr64.dll

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/blob/main/Amadey/txt/amadey_c2s_found_13_04_2023.txt
# Reference: https://www.virustotal.com/gui/file/08fa2eaf0a93a4b1cc98e8eb518f3e55f4cd46c8f698b66db9c86eb76c323133/detection

http://141.98.6.232
ama.hostiko.link
ama.hostiko.com.ug
/jd9dd3Vw/clip.dll
/jd9dd3Vw/cred.dll
/jd9dd3Vw/clip64.dll
/jd9dd3Vw/cred64.dll
/jd9dd3Vw/index.php
/jd9dd3Vw/login.php
/jd9dd3Vw/plugins/clip.dll
/jd9dd3Vw/plugins/clip64.dll
/jd9dd3Vw/plugins/cred.dll
/jd9dd3Vw/plugins/cred64.dll
/jd9dd3Vw/plugins/scr.dll
/jd9dd3Vw/plugins/scr64.dll
/jd9dd3Vw/scr.dll
/jd9dd3Vw/scr64.dll

# Reference: https://twitter.com/jaydinbas/status/1653361395507908608

http://77.73.134.48

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/blob/main/Amadey/txt/amadey_c2s_found_26_04_2023.txt

http://193.3.19.154
myserveur855.cc
/8bmeVwqx/clip.dll
/8bmeVwqx/cred.dll
/8bmeVwqx/clip64.dll
/8bmeVwqx/cred64.dll
/8bmeVwqx/index.php
/8bmeVwqx/login.php
/8bmeVwqx/plugins/clip.dll
/8bmeVwqx/plugins/clip64.dll
/8bmeVwqx/plugins/cred.dll
/8bmeVwqx/plugins/cred64.dll
/8bmeVwqx/plugins/scr.dll
/8bmeVwqx/plugins/scr64.dll
/8bmeVwqx/scr.dll
/8bmeVwqx/scr64.dll

# Reference: https://www.virustotal.com/gui/file/1d0853e75493b553ef3bb9c05b1b87036e07a8a29a812df6334c4c150444ddfc/detection

tadogem.com

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/commit/26b8e7f83467ec49198cb481f69e48c0fe965867

http://176.113.115.253
http://79.137.203.59
/3nbslScQ/clip.dll
/3nbslScQ/cred.dll
/3nbslScQ/clip64.dll
/3nbslScQ/cred64.dll
/3nbslScQ/index.php
/3nbslScQ/login.php
/3nbslScQ/plugins/clip.dll
/3nbslScQ/plugins/clip64.dll
/3nbslScQ/plugins/cred.dll
/3nbslScQ/plugins/cred64.dll
/3nbslScQ/plugins/scr.dll
/3nbslScQ/plugins/scr64.dll
/3nbslScQ/scr.dll
/3nbslScQ/scr64.dll
/b8dmsSo/clip.dll
/b8dmsSo/cred.dll
/b8dmsSo/clip64.dll
/b8dmsSo/cred64.dll
/b8dmsSo/index.php
/b8dmsSo/login.php
/b8dmsSo/plugins/clip.dll
/b8dmsSo/plugins/clip64.dll
/b8dmsSo/plugins/cred.dll
/b8dmsSo/plugins/cred64.dll
/b8dmsSo/plugins/scr.dll
/b8dmsSo/plugins/scr64.dll
/b8dmsSo/scr.dll
/b8dmsSo/scr64.dll

# Reference: https://www.virustotal.com/gui/file/0004996919acd29b86ead57cf0c41ce4781a9405f668bf15f40cafa50a1f21b2/detection

http://77.91.124.20

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/commit/73c6a93889bd9c9f089fd2d8393b545a00f16178

http://95.214.26.53
http://95.214.27.98
/J84hHFuefh2/clip.dll
/J84hHFuefh2/cred.dll
/J84hHFuefh2/clip64.dll
/J84hHFuefh2/cred64.dll
/J84hHFuefh2/index.php
/J84hHFuefh2/login.php
/J84hHFuefh2/plugins/clip.dll
/J84hHFuefh2/plugins/clip64.dll
/J84hHFuefh2/plugins/cred.dll
/J84hHFuefh2/plugins/cred64.dll
/J84hHFuefh2/plugins/scr.dll
/J84hHFuefh2/plugins/scr64.dll
/J84hHFuefh2/scr.dll
/J84hHFuefh2/scr64.dll

# Reference: https://embee-research.ghost.io/amadey-bot-infrastructure/

http://193.201.9.241
http://193.201.9.44
http://193.201.9.67
http://77.91.124.130
http://77.91.124.203
http://77.91.68.248
http://77.91.68.61
http://77.91.68.62

# Reference: https://twitter.com/g0njxa/status/1667306661256503302
# Reference: https://app.any.run/tasks/6b4a52a0-4bbe-4c57-a196-a7c0e3425220/

http://62.182.156.152

# Reference: https://twitter.com/g0njxa/status/1672532345121910785
# Reference: https://app.any.run/tasks/057f15c5-864c-4535-b8af-70405ead5fcd/

http://109.206.241.33
/9bDc8sQ/clip.dll
/9bDc8sQ/cred.dll
/9bDc8sQ/clip64.dll
/9bDc8sQ/cred64.dll
/9bDc8sQ/index.php
/9bDc8sQ/login.php
/9bDc8sQ/plugins/clip.dll
/9bDc8sQ/plugins/clip64.dll
/9bDc8sQ/plugins/cred.dll
/9bDc8sQ/plugins/cred64.dll
/9bDc8sQ/plugins/scr.dll
/9bDc8sQ/plugins/scr64.dll
/9bDc8sQ/scr.dll
/9bDc8sQ/scr64.dll

# Reference: https://www.virustotal.com/gui/file/cf76ac64d1038d54fa178a67712a4916e021b6b381241b44c2ceed7428ba4692/detection

sergejbukotko.com
traffic-to.site
verypayment.net

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/commit/edae14d21246844d786c8c7036487d466da8481b

http://5.42.65.80
http://77.91.68.63
asdasdwqrweerwfa.top
/cronus/clip.dll
/cronus/clip64.dll
/cronus/cred.dll
/cronus/cred64.dll
/cronus/scr.dll
/cronus/scr64.dll
/cronus/plugins/clip.dll
/cronus/plugins/clip64.dll
/cronus/plugins/cred.dll
/cronus/plugins/cred64.dll
/cronus/plugins/scr.dll
/cronus/plugins/scr64.dll
/folder966/clip.dll
/folder966/clip64.dll
/folder966/cred.dll
/folder966/cred64.dll
/folder966/scr.dll
/folder966/scr64.dll
/folder966/plugins/clip.dll
/folder966/plugins/clip64.dll
/folder966/plugins/cred.dll
/folder966/plugins/cred64.dll
/folder966/plugins/scr.dll
/folder966/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/ed4097c805506a4ecd32cff95c391b986bb7c5868d907084bfbdf43a4d938c1c/detection

http://5.42.92.67

# Reference: https://www.virustotal.com/gui/file/5da8e3d99712b818448fafb73bcb01b198ff27d8f68c2c60a2db1fca4eb3b45e/detection

http://87.121.47.63

# Reference: https://threatfox.abuse.ch/ioc/1144134/

http://45.9.74.182
/b7djSDcPcZ/clip.dll
/b7djSDcPcZ/cred.dll
/b7djSDcPcZ/clip64.dll
/b7djSDcPcZ/cred64.dll
/b7djSDcPcZ/index.php
/b7djSDcPcZ/login.php
/b7djSDcPcZ/plugins/clip.dll
/b7djSDcPcZ/plugins/clip64.dll
/b7djSDcPcZ/plugins/cred.dll
/b7djSDcPcZ/plugins/cred64.dll
/b7djSDcPcZ/plugins/scr.dll
/b7djSDcPcZ/plugins/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1146941/
# Reference: https://app.validin.com/axon?source=DNS&type=ip&find=45.132.1.1

ocmtancmi2c4t.life
ocmtancmi2c4t.live
ocmtancmi2c4t.lives
ocmtancmi2c4t.site
ocmtancmi2c4t.website
ocmtancmi2c4t.xyz
ocmtancmi2c5t.life
ocmtancmi2c5t.ltd
ocmtancmi2c5t.site

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/commit/45fee8d98e058c4c982e5bd1cc4dfa65d8e999b5

http://104.248.239.160
http://45.9.74.141
http://45.9.74.164
badurka5hippo73.top
getupdate.click
/0bjdn2z/clip.dll
/0bjdn2z/cred.dll
/0bjdn2z/clip64.dll
/0bjdn2z/cred64.dll
/0bjdn2z/index.php
/0bjdn2z/login.php
/0bjdn2z/plugins/clip.dll
/0bjdn2z/plugins/clip64.dll
/0bjdn2z/plugins/cred.dll
/0bjdn2z/plugins/cred64.dll
/0bjdn2z/plugins/scr.dll
/0bjdn2z/plugins/scr64.dll
/0bjdn2z/scr.dll
/0bjdn2z/scr64.dll
/8bmevwqx/clip.dll
/8bmevwqx/cred.dll
/8bmevwqx/clip64.dll
/8bmevwqx/cred64.dll
/8bmevwqx/index.php
/8bmevwqx/login.php
/8bmevwqx/plugins/clip.dll
/8bmevwqx/plugins/clip64.dll
/8bmevwqx/plugins/cred.dll
/8bmevwqx/plugins/cred64.dll
/8bmevwqx/plugins/scr.dll
/8bmevwqx/plugins/scr64.dll
/8bmevwqx/scr.dll
/8bmevwqx/scr64.dll
/8vcwxwwx3/clip.dll
/8vcwxwwx3/cred.dll
/8vcwxwwx3/clip64.dll
/8vcwxwwx3/cred64.dll
/8vcwxwwx3/index.php
/8vcwxwwx3/login.php
/8vcwxwwx3/plugins/clip.dll
/8vcwxwwx3/plugins/clip64.dll
/8vcwxwwx3/plugins/cred.dll
/8vcwxwwx3/plugins/cred64.dll
/8vcwxwwx3/plugins/scr.dll
/8vcwxwwx3/plugins/scr64.dll
/8vcwxwwx3/scr.dll
/8vcwxwwx3/scr64.dll
/9bdc8sq/clip.dll
/9bdc8sq/cred.dll
/9bdc8sq/clip64.dll
/9bdc8sq/cred64.dll
/9bdc8sq/index.php
/9bdc8sq/login.php
/9bdc8sq/plugins/clip.dll
/9bdc8sq/plugins/clip64.dll
/9bdc8sq/plugins/cred.dll
/9bdc8sq/plugins/cred64.dll
/9bdc8sq/plugins/scr.dll
/9bdc8sq/plugins/scr64.dll
/9bdc8sq/scr.dll
/9bdc8sq/scr64.dll
/9kdmsxq/clip.dll
/9kdmsxq/cred.dll
/9kdmsxq/clip64.dll
/9kdmsxq/cred64.dll
/9kdmsxq/index.php
/9kdmsxq/login.php
/9kdmsxq/plugins/clip.dll
/9kdmsxq/plugins/clip64.dll
/9kdmsxq/plugins/cred.dll
/9kdmsxq/plugins/cred64.dll
/9kdmsxq/plugins/scr.dll
/9kdmsxq/plugins/scr64.dll
/9kdmsxq/scr.dll
/9kdmsxq/scr64.dll
/b7djsdcpcz/clip.dll
/b7djsdcpcz/cred.dll
/b7djsdcpcz/clip64.dll
/b7djsdcpcz/cred64.dll
/b7djsdcpcz/index.php
/b7djsdcpcz/login.php
/b7djsdcpcz/plugins/clip.dll
/b7djsdcpcz/plugins/clip64.dll
/b7djsdcpcz/plugins/cred.dll
/b7djsdcpcz/plugins/cred64.dll
/b7djsdcpcz/plugins/scr.dll
/b7djsdcpcz/plugins/scr64.dll
/b7djsdcpcz/scr.dll
/b7djsdcpcz/scr64.dll
/f5oknw/clip.dll
/f5oknw/cred.dll
/f5oknw/clip64.dll
/f5oknw/cred64.dll
/f5oknw/index.php
/f5oknw/login.php
/f5oknw/plugins/clip.dll
/f5oknw/plugins/clip64.dll
/f5oknw/plugins/cred.dll
/f5oknw/plugins/cred64.dll
/f5oknw/plugins/scr.dll
/f5oknw/plugins/scr64.dll
/f5oknw/scr.dll
/f5oknw/scr64.dll
/f84nls2/clip.dll
/f84nls2/cred.dll
/f84nls2/clip64.dll
/f84nls2/cred64.dll
/f84nls2/index.php
/f84nls2/login.php
/f84nls2/plugins/clip.dll
/f84nls2/plugins/clip64.dll
/f84nls2/plugins/cred.dll
/f84nls2/plugins/cred64.dll
/f84nls2/plugins/scr.dll
/f84nls2/plugins/scr64.dll
/f84nls2/scr.dll
/f84nls2/scr64.dll
/fjgd555c3/clip.dll
/fjgd555c3/cred.dll
/fjgd555c3/clip64.dll
/fjgd555c3/cred64.dll
/fjgd555c3/index.php
/fjgd555c3/login.php
/fjgd555c3/plugins/clip.dll
/fjgd555c3/plugins/clip64.dll
/fjgd555c3/plugins/cred.dll
/fjgd555c3/plugins/cred64.dll
/fjgd555c3/plugins/scr.dll
/fjgd555c3/plugins/scr64.dll
/fjgd555c3/scr.dll
/fjgd555c3/scr64.dll
/g9dvhsk/clip.dll
/g9dvhsk/cred.dll
/g9dvhsk/clip64.dll
/g9dvhsk/cred64.dll
/g9dvhsk/index.php
/g9dvhsk/login.php
/g9dvhsk/plugins/clip.dll
/g9dvhsk/plugins/clip64.dll
/g9dvhsk/plugins/cred.dll
/g9dvhsk/plugins/cred64.dll
/g9dvhsk/plugins/scr.dll
/g9dvhsk/plugins/scr64.dll
/g9dvhsk/scr.dll
/g9dvhsk/scr64.dll
/g9ttnd3bs/clip.dll
/g9ttnd3bs/cred.dll
/g9ttnd3bs/clip64.dll
/g9ttnd3bs/cred64.dll
/g9ttnd3bs/index.php
/g9ttnd3bs/login.php
/g9ttnd3bs/plugins/clip.dll
/g9ttnd3bs/plugins/clip64.dll
/g9ttnd3bs/plugins/cred.dll
/g9ttnd3bs/plugins/cred64.dll
/g9ttnd3bs/plugins/scr.dll
/g9ttnd3bs/plugins/scr64.dll
/g9ttnd3bs/scr.dll
/g9ttnd3bs/scr64.dll
/j84hhfuefh2/clip.dll
/j84hhfuefh2/cred.dll
/j84hhfuefh2/clip64.dll
/j84hhfuefh2/cred64.dll
/j84hhfuefh2/index.php
/j84hhfuefh2/login.php
/j84hhfuefh2/plugins/clip.dll
/j84hhfuefh2/plugins/clip64.dll
/j84hhfuefh2/plugins/cred.dll
/j84hhfuefh2/plugins/cred64.dll
/j84hhfuefh2/plugins/scr.dll
/j84hhfuefh2/plugins/scr64.dll
/j84hhfuefh2/scr.dll
/j84hhfuefh2/scr64.dll
/jd93d22cb1/clip.dll
/jd93d22cb1/cred.dll
/jd93d22cb1/clip64.dll
/jd93d22cb1/cred64.dll
/jd93d22cb1/index.php
/jd93d22cb1/login.php
/jd93d22cb1/plugins/clip.dll
/jd93d22cb1/plugins/clip64.dll
/jd93d22cb1/plugins/cred.dll
/jd93d22cb1/plugins/cred64.dll
/jd93d22cb1/plugins/scr.dll
/jd93d22cb1/plugins/scr64.dll
/jd93d22cb1/scr.dll
/jd93d22cb1/scr64.dll
/jd9dd3vw/clip.dll
/jd9dd3vw/cred.dll
/jd9dd3vw/clip64.dll
/jd9dd3vw/cred64.dll
/jd9dd3vw/index.php
/jd9dd3vw/login.php
/jd9dd3vw/plugins/clip.dll
/jd9dd3vw/plugins/clip64.dll
/jd9dd3vw/plugins/cred.dll
/jd9dd3vw/plugins/cred64.dll
/jd9dd3vw/plugins/scr.dll
/jd9dd3vw/plugins/scr64.dll
/jd9dd3vw/scr.dll
/jd9dd3vw/scr64.dll
/lkb2dxj3/clip.dll
/lkb2dxj3/cred.dll
/lkb2dxj3/clip64.dll
/lkb2dxj3/cred64.dll
/lkb2dxj3/index.php
/lkb2dxj3/login.php
/lkb2dxj3/plugins/clip.dll
/lkb2dxj3/plugins/clip64.dll
/lkb2dxj3/plugins/cred.dll
/lkb2dxj3/plugins/cred64.dll
/lkb2dxj3/plugins/scr.dll
/lkb2dxj3/plugins/scr64.dll
/lkb2dxj3/scr.dll
/lkb2dxj3/scr64.dll
/so57nst/clip.dll
/so57nst/cred.dll
/so57nst/clip64.dll
/so57nst/cred64.dll
/so57nst/index.php
/so57nst/login.php
/so57nst/plugins/clip.dll
/so57nst/plugins/clip64.dll
/so57nst/plugins/cred.dll
/so57nst/plugins/cred64.dll
/so57nst/plugins/scr.dll
/so57nst/plugins/scr64.dll
/so57nst/scr.dll
/so57nst/scr64.dll
/u83mfds2/clip.dll
/u83mfds2/cred.dll
/u83mfds2/clip64.dll
/u83mfds2/cred64.dll
/u83mfds2/index.php
/u83mfds2/login.php
/u83mfds2/plugins/clip.dll
/u83mfds2/plugins/clip64.dll
/u83mfds2/plugins/cred.dll
/u83mfds2/plugins/cred64.dll
/u83mfds2/plugins/scr.dll
/u83mfds2/plugins/scr64.dll
/u83mfds2/scr.dll
/u83mfds2/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1148725/

http://79.137.192.18

# Reference: https://threatfox.abuse.ch/ioc/1149306/

amaad100.com
/gBcskbwWs/clip.dll
/gBcskbwWs/cred.dll
/gBcskbwWs/clip64.dll
/gBcskbwWs/cred64.dll
/gBcskbwWs/index.php
/gBcskbwWs/login.php
/gBcskbwWs/plugins/clip.dll
/gBcskbwWs/plugins/clip64.dll
/gBcskbwWs/plugins/cred.dll
/gBcskbwWs/plugins/cred64.dll
/gBcskbwWs/plugins/scr.dll
/gBcskbwWs/plugins/scr64.dll
/gBcskbwWs/scr.dll
/gBcskbwWs/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1149501/

/2BfwEn6KgTm/clip.dll
/2BfwEn6KgTm/cred.dll
/2BfwEn6KgTm/clip64.dll
/2BfwEn6KgTm/cred64.dll
/2BfwEn6KgTm/index.php
/2BfwEn6KgTm/login.php
/2BfwEn6KgTm/plugins/clip.dll
/2BfwEn6KgTm/plugins/clip64.dll
/2BfwEn6KgTm/plugins/cred.dll
/2BfwEn6KgTm/plugins/cred64.dll
/2BfwEn6KgTm/plugins/scr.dll
/2BfwEn6KgTm/plugins/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1149518/

http://77.91.68.18

# Reference: https://threatfox.abuse.ch/ioc/1149719/

smz-llc.net
smz.sh
/2BfwEnWXSKj6KgTm/
/g8ywef8gy/
/2BfwEnWXSKj6KgTm/g8ywef8gy/
/2BfwEnWXSKj6KgTm/g8ywef8gy/clip.dll
/2BfwEnWXSKj6KgTm/g8ywef8gy/clip64.dll
/2BfwEnWXSKj6KgTm/g8ywef8gy/cred.dll
/2BfwEnWXSKj6KgTm/g8ywef8gy/cred64.dll
/2BfwEnWXSKj6KgTm/g8ywef8gy/scr.dll
/2BfwEnWXSKj6KgTm/g8ywef8gy/scr64.dll
/g8ywef8gy/Plugins/clip.dll
/g8ywef8gy/Plugins/clip64.dll
/g8ywef8gy/Plugins/cred.dll
/g8ywef8gy/Plugins/cred64.dll
/g8ywef8gy/index.php
/g8ywef8gy/login.php
/g8ywef8gy/clip.dll
/g8ywef8gy/clip64.dll
/g8ywef8gy/cred.dll
/g8ywef8gy/cred64.dll
/2BfwEnWXSKj6KgTm/clip.dll
/2BfwEnWXSKj6KgTm/cred.dll
/2BfwEnWXSKj6KgTm/clip64.dll
/2BfwEnWXSKj6KgTm/cred64.dll
/2BfwEnWXSKj6KgTm/index.php
/2BfwEnWXSKj6KgTm/login.php
/2BfwEnWXSKj6KgTm/plugins/clip.dll
/2BfwEnWXSKj6KgTm/plugins/clip64.dll
/2BfwEnWXSKj6KgTm/plugins/cred.dll
/2BfwEnWXSKj6KgTm/plugins/cred64.dll
/2BfwEnWXSKj6KgTm/plugins/scr.dll
/2BfwEnWXSKj6KgTm/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/b6619843ba0364e1a201c2cdad9127ac1d20a518cb120850d74242763a6c5dfe/detection

exploit.lat
xyl.lat

# Reference: https://tria.ge/230821-ktap9sdg21/behavioral2
# Reference: https://www.virustotal.com/gui/file/68e676758fd28a865eaa2f6929328b635b3108682737ecc4ff5889b2fe97a1e5/detection

ezisystem.com
house.ezisystem.com
feynus.com/amdays.exe

# Reference: https://twitter.com/illegalFawn/status/1090685303545888770

result-viewer.com

# Reference: https://www.virustotal.com/gui/url/5c68a1e6355fa47dbb44cbbe7bd5e9c4448cf5e9b9da8c2b1d13e026bf1ed5c0/detection

http://77.91.68.3

# Reference: https://www.virustotal.com/gui/file/182024beffcb7c5fbce36af989bf052dea4ed45fa0cc07156f3e39a24fc5178e/detection

/nasa/cred64.dll
/nasa/clip64.dll
/nasa/scr64.dll
/nasa/Plugins/cred64.dll
/nasa/Plugins/clip64.dll
/nasa/Plugins/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1152758/

http://45.9.74.5
/b7djSDcPcZ/clip.dll
/b7djSDcPcZ/cred.dll
/b7djSDcPcZ/clip64.dll
/b7djSDcPcZ/cred64.dll
/b7djSDcPcZ/index.php
/b7djSDcPcZ/login.php
/b7djSDcPcZ/plugins/clip.dll
/b7djSDcPcZ/plugins/clip64.dll
/b7djSDcPcZ/plugins/cred.dll
/b7djSDcPcZ/plugins/cred64.dll
/b7djSDcPcZ/plugins/scr.dll
/b7djSDcPcZ/plugins/scr64.dll
/b7djSDcPcZ/scr.dll
/b7djSDcPcZ/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1152822/

http://5.42.64.33
/vu3skClDn/clip.dll
/vu3skClDn/cred.dll
/vu3skClDn/clip64.dll
/vu3skClDn/cred64.dll
/vu3skClDn/index.php
/vu3skClDn/login.php
/vu3skClDn/plugins/clip.dll
/vu3skClDn/plugins/clip64.dll
/vu3skClDn/plugins/cred.dll
/vu3skClDn/plugins/cred64.dll
/vu3skClDn/plugins/scr.dll
/vu3skClDn/plugins/scr64.dll
/vu3skClDn/scr.dll
/vu3skClDn/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1153014/

http://79.110.62.80

# Reference: https://twitter.com/0x6rss/status/1699410286548042123

http://77.91.68.52

# Reference: https://threatfox.abuse.ch/ioc/1163494/

/bkd7djmsa/clip.dll
/bkd7djmsa/cred.dll
/bkd7djmsa/clip64.dll
/bkd7djmsa/cred64.dll
/bkd7djmsa/index.php
/bkd7djmsa/login.php
/bkd7djmsa/plugins/clip.dll
/bkd7djmsa/plugins/clip64.dll
/bkd7djmsa/plugins/cred.dll
/bkd7djmsa/plugins/cred64.dll
/bkd7djmsa/plugins/scr.dll
/bkd7djmsa/plugins/scr64.dll
/bkd7djmsa/scr.dll
/bkd7djmsa/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1164812/

http://5.42.64.45

# Reference: https://threatfox.abuse.ch/ioc/1165585/

http://176.113.115.81

# Reference: https://www.virustotal.com/gui/file/03ddbb1decaf600ca3f415fdd1cb8050d7002ad88a0cc84b7f827f7790599c90/detection

fesportal.com
soulofevil.com
sylviamund.com

# Reference: https://threatfox.abuse.ch/ioc/1179487/

http://95.141.41.12
/n9kd3X/clip.dll
/n9kd3X/cred.dll
/n9kd3X/clip64.dll
/n9kd3X/cred64.dll
/n9kd3X/index.php
/n9kd3X/login.php
/n9kd3X/plugins/clip.dll
/n9kd3X/plugins/clip64.dll
/n9kd3X/plugins/cred.dll
/n9kd3X/plugins/cred64.dll
/n9kd3X/plugins/scr.dll
/n9kd3X/plugins/scr64.dll
/n9kd3X/scr.dll
/n9kd3X/scr64.dll

# Reference: https://twitter.com/g0njxa/status/1707512644054221018

http://193.42.32.29
/9bDc8sQ/clip.dll
/9bDc8sQ/cred.dll
/9bDc8sQ/clip64.dll
/9bDc8sQ/cred64.dll
/9bDc8sQ/index.php
/9bDc8sQ/login.php
/9bDc8sQ/plugins/clip.dll
/9bDc8sQ/plugins/clip64.dll
/9bDc8sQ/plugins/cred.dll
/9bDc8sQ/plugins/cred64.dll
/9bDc8sQ/plugins/scr.dll
/9bDc8sQ/plugins/scr64.dll
/9bDc8sQ/scr.dll
/9bDc8sQ/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1180359/

http://77.91.124.1

# Reference: https://threatfox.abuse.ch/ioc/1182752/

http://5.42.65.28
/b9djs2g/clip.dll
/b9djs2g/cred.dll
/b9djs2g/clip64.dll
/b9djs2g/cred64.dll
/b9djs2g/index.php
/b9djs2g/login.php
/b9djs2g/plugins/clip.dll
/b9djs2g/plugins/clip64.dll
/b9djs2g/plugins/cred.dll
/b9djs2g/plugins/cred64.dll
/b9djs2g/plugins/scr.dll
/b9djs2g/plugins/scr64.dll
/b9djs2g/scr.dll
/b9djs2g/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1182977/

cncdevelopment.boo

# Reference: https://www.virustotal.com/gui/file/9487f7d9306c31dd816e100efbaef84e97d62352d4cd7a052ce1ed3ed8d8af7b/detection

cncdevelopment.org
zippityjava.fun
incogitant.zippityjava.fun

# Reference: https://twitter.com/g0njxa/status/1712843954897485991
# Reference: https://app.any.run/tasks/fe1de691-d310-4357-8020-5ce81da639dd/

http://77.91.97.162
/g93kdwj3S/clip.dll
/g93kdwj3S/cred.dll
/g93kdwj3S/clip64.dll
/g93kdwj3S/cred64.dll
/g93kdwj3S/index.php
/g93kdwj3S/login.php
/g93kdwj3S/plugins/clip.dll
/g93kdwj3S/plugins/clip64.dll
/g93kdwj3S/plugins/cred.dll
/g93kdwj3S/plugins/cred64.dll
/g93kdwj3S/plugins/scr.dll
/g93kdwj3S/plugins/scr64.dll
/g93kdwj3S/scr.dll
/g93kdwj3S/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1188896/

http://85.209.11.199

# Reference: https://twitter.com/g0njxa/status/1715068625181151382

http://193.42.33.7
/mbSDvj3/clip.dll
/mbSDvj3/cred.dll
/mbSDvj3/clip64.dll
/mbSDvj3/cred64.dll
/mbSDvj3/index.php
/mbSDvj3/login.php
/mbSDvj3/plugins/clip.dll
/mbSDvj3/plugins/clip64.dll
/mbSDvj3/plugins/cred.dll
/mbSDvj3/plugins/cred64.dll
/mbSDvj3/plugins/scr.dll
/mbSDvj3/plugins/scr64.dll
/mbSDvj3/scr.dll
/mbSDvj3/scr64.dll

# Reference: https://twitter.com/g0njxa/status/1719835010599952730

http://167.235.20.126
http://185.196.8.176
/7jshasdS/clip.dll
/7jshasdS/cred.dll
/7jshasdS/clip64.dll
/7jshasdS/cred64.dll
/7jshasdS/index.php
/7jshasdS/login.php
/7jshasdS/plugins/clip.dll
/7jshasdS/plugins/clip64.dll
/7jshasdS/plugins/cred.dll
/7jshasdS/plugins/cred64.dll
/7jshasdS/plugins/scr.dll
/7jshasdS/plugins/scr64.dll
/7jshasdS/scr.dll
/7jshasdS/scr64.dll
/bjdm32DP/clip.dll
/bjdm32DP/cred.dll
/bjdm32DP/clip64.dll
/bjdm32DP/cred64.dll
/bjdm32DP/index.php
/bjdm32DP/login.php
/bjdm32DP/plugins/clip.dll
/bjdm32DP/plugins/clip64.dll
/bjdm32DP/plugins/cred.dll
/bjdm32DP/plugins/cred64.dll
/bjdm32DP/plugins/scr.dll
/bjdm32DP/plugins/scr64.dll
/bjdm32DP/scr.dll
/bjdm32DP/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1199078/

http://185.172.128.100
/u6vhSc3PPq/clip.dll
/u6vhSc3PPq/cred.dll
/u6vhSc3PPq/clip64.dll
/u6vhSc3PPq/cred64.dll
/u6vhSc3PPq/index.php
/u6vhSc3PPq/login.php
/u6vhSc3PPq/plugins/clip.dll
/u6vhSc3PPq/plugins/clip64.dll
/u6vhSc3PPq/plugins/cred.dll
/u6vhSc3PPq/plugins/cred64.dll
/u6vhSc3PPq/plugins/scr.dll
/u6vhSc3PPq/plugins/scr64.dll
/u6vhSc3PPq/scr.dll
/u6vhSc3PPq/scr64.dll

# Reference: https://www.virustotal.com/gui/file/00fb9d3ea20805d4b650ecd38f87747f233489aac90ea1dc36bee763760bceca/detection

/u8v5zeQ/clip.dll
/u8v5zeQ/cred.dll
/u8v5zeQ/clip64.dll
/u8v5zeQ/cred64.dll
/u8v5zeQ/index.php
/u8v5zeQ/login.php
/u8v5zeQ/plugins/clip.dll
/u8v5zeQ/plugins/clip64.dll
/u8v5zeQ/plugins/cred.dll
/u8v5zeQ/plugins/cred64.dll
/u8v5zeQ/plugins/scr.dll
/u8v5zeQ/plugins/scr64.dll

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2023-11-20)

http://185.172.128.19
http://5.42.66.9
http://69.197.161.106
0-9u210edu12j-dj-1.xyz
atillapro.com
brodoyouevenlift.co.za
kbond2024.org
/g9sdjScV2/clip.dll
/g9sdjScV2/cred.dll
/g9sdjScV2/clip64.dll
/g9sdjScV2/cred64.dll
/g9sdjScV2/index.php
/g9sdjScV2/login.php
/g9sdjScV2/plugins/clip.dll
/g9sdjScV2/plugins/clip64.dll
/g9sdjScV2/plugins/cred.dll
/g9sdjScV2/plugins/cred64.dll
/g9sdjScV2/plugins/scr.dll
/g9sdjScV2/plugins/scr64.dll
/g9smksXla/clip.dll
/g9smksXla/cred.dll
/g9smksXla/clip64.dll
/g9smksXla/cred64.dll
/g9smksXla/index.php
/g9smksXla/login.php
/g9smksXla/plugins/clip.dll
/g9smksXla/plugins/clip64.dll
/g9smksXla/plugins/cred.dll
/g9smksXla/plugins/cred64.dll
/g9smksXla/plugins/scr.dll
/g9smksXla/plugins/scr64.dll
/ghsdh39s/clip.dll
/ghsdh39s/cred.dll
/ghsdh39s/clip64.dll
/ghsdh39s/cred64.dll
/ghsdh39s/index.php
/ghsdh39s/login.php
/ghsdh39s/plugins/clip.dll
/ghsdh39s/plugins/clip64.dll
/ghsdh39s/plugins/cred.dll
/ghsdh39s/plugins/cred64.dll
/ghsdh39s/plugins/scr.dll
/ghsdh39s/plugins/scr64.dll
/vsdjcn3khS/clip.dll
/vsdjcn3khS/cred.dll
/vsdjcn3khS/clip64.dll
/vsdjcn3khS/cred64.dll
/vsdjcn3khS/index.php
/vsdjcn3khS/login.php
/vsdjcn3khS/plugins/clip.dll
/vsdjcn3khS/plugins/clip64.dll
/vsdjcn3khS/plugins/cred.dll
/vsdjcn3khS/plugins/cred64.dll
/vsdjcn3khS/plugins/scr.dll
/vsdjcn3khS/plugins/scr64.dll

# Reference: https://twitter.com/banthisguy9349/status/1729484617827111207
# Reference: https://www.virustotal.com/gui/file/00051061733bd86423f5da4e69bb41398a4c808e0cab7197113c3fbbef5e5585/detection

arrunda.ru
sibcomputer.ru
shohetrc.com
tve-mail.com

# Reference: https://twitter.com/banthisguy9349/status/1729501368413536551

pssvnjlxkabaagyqxt3rkgfaigflblnt4qncmfpcgrm46plqlp3wjzyd.onion

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2023-12-04)

http://185.172.128.5
http://185.196.8.195
http://77.91.76.37
http://80.66.75.214
/g8djmsaxA/clip.dll
/g8djmsaxA/cred.dll
/g8djmsaxA/clip64.dll
/g8djmsaxA/cred64.dll
/g8djmsaxA/index.php
/g8djmsaxA/login.php
/g8djmsaxA/plugins/clip.dll
/g8djmsaxA/plugins/clip64.dll
/g8djmsaxA/plugins/cred.dll
/g8djmsaxA/plugins/cred64.dll
/g8djmsaxA/plugins/scr.dll
/g8djmsaxA/plugins/scr64.dll
/g8djmsaxA/scr.dll
/g8djmsaxA/scr64.dll
/g8samsA2/clip.dll
/g8samsA2/cred.dll
/g8samsA2/clip64.dll
/g8samsA2/cred64.dll
/g8samsA2/index.php
/g8samsA2/login.php
/g8samsA2/plugins/clip.dll
/g8samsA2/plugins/clip64.dll
/g8samsA2/plugins/cred.dll
/g8samsA2/plugins/cred64.dll
/g8samsA2/plugins/scr.dll
/g8samsA2/plugins/scr64.dll
/g8samsA2/scr.dll
/g8samsA2/scr64.dll
/v8sjh3hs8/clip.dll
/v8sjh3hs8/cred.dll
/v8sjh3hs8/clip64.dll
/v8sjh3hs8/cred64.dll
/v8sjh3hs8/index.php
/v8sjh3hs8/login.php
/v8sjh3hs8/plugins/clip.dll
/v8sjh3hs8/plugins/clip64.dll
/v8sjh3hs8/plugins/cred.dll
/v8sjh3hs8/plugins/cred64.dll
/v8sjh3hs8/plugins/scr.dll
/v8sjh3hs8/plugins/scr64.dll
/v8sjh3hs8/scr.dll
/v8sjh3hs8/scr64.dll

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2023-12-05)

http://185.172.128.125
http://194.26.135.90
/yXNwKVfkS28Y/clip.dll
/yXNwKVfkS28Y/cred.dll
/yXNwKVfkS28Y/clip64.dll
/yXNwKVfkS28Y/cred64.dll
/yXNwKVfkS28Y/index.php
/yXNwKVfkS28Y/login.php
/yXNwKVfkS28Y/plugins/clip.dll
/yXNwKVfkS28Y/plugins/clip64.dll
/yXNwKVfkS28Y/plugins/cred.dll
/yXNwKVfkS28Y/plugins/cred64.dll
/yXNwKVfkS28Y/plugins/scr.dll
/yXNwKVfkS28Y/plugins/scr64.dll
/yXNwKVfkS28Y/scr.dll
/yXNwKVfkS28Y/scr64.dll

# Reference: https://threatfox.abuse.ch/ioc/1212219/

http://5.42.65.125
/k92lsA3dpb/clip.dll
/k92lsA3dpb/clip64.dll
/k92lsA3dpb/cred.dll
/k92lsA3dpb/cred64.dll
/k92lsA3dpb/index.php
/k92lsA3dpb/login.php
/k92lsA3dpb/plugins/clip.dll
/k92lsA3dpb/plugins/clip64.dll
/k92lsA3dpb/plugins/cred.dll
/k92lsA3dpb/plugins/cred64.dll
/k92lsA3dpb/plugins/scr.dll
/k92lsA3dpb/plugins/scr64.dll
/k92lsA3dpb/scr.dll
/k92lsA3dpb/scr64.dll

# Reference: https://www.virustotal.com/gui/file/6063f4a85853fc5f0e09968c9d06c0fdae1d9651f7a73e2d10dc2916c109dd51/detection

http://185.172.128.32

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2023-12-24)

http://193.3.19.114
http://5.42.65.114
http://5.42.66.32
http://91.92.247.16
cbinr.com
jazoopsloo.info
rimakc.ru
second.amadgood.com
/ybhdjklsS23/clip.dll
/ybhdjklsS23/cred.dll
/ybhdjklsS23/clip64.dll
/ybhdjklsS23/cred64.dll
/ybhdjklsS23/index.php
/ybhdjklsS23/login.php
/ybhdjklsS23/plugins/clip.dll
/ybhdjklsS23/plugins/clip64.dll
/ybhdjklsS23/plugins/cred.dll
/ybhdjklsS23/plugins/cred64.dll
/ybhdjklsS23/plugins/scr.dll
/ybhdjklsS23/plugins/scr64.dll
/ybhdjklsS23/scr.dll
/ybhdjklsS23/scr64.dll

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2024-01-17)

http://185.172.128.63
http://5.42.65.44
http://87.121.87.199
rubyonthewal.xyz
/b8sdjsdkS/clip.dll
/b8sdjsdkS/cred.dll
/b8sdjsdkS/clip64.dll
/b8sdjsdkS/cred64.dll
/b8sdjsdkS/index.php
/b8sdjsdkS/login.php
/b8sdjsdkS/plugins/clip.dll
/b8sdjsdkS/plugins/clip64.dll
/b8sdjsdkS/plugins/cred.dll
/b8sdjsdkS/plugins/cred64.dll
/b8sdjsdkS/plugins/scr.dll
/b8sdjsdkS/plugins/scr64.dll
/b8sdjsdkS/scr.dll
/b8sdjsdkS/scr64.dll
/f7Vkbh7X/clip.dll
/f7Vkbh7X/cred.dll
/f7Vkbh7X/clip64.dll
/f7Vkbh7X/cred64.dll
/f7Vkbh7X/index.php
/f7Vkbh7X/login.php
/f7Vkbh7X/plugins/clip.dll
/f7Vkbh7X/plugins/clip64.dll
/f7Vkbh7X/plugins/cred.dll
/f7Vkbh7X/plugins/cred64.dll
/f7Vkbh7X/plugins/scr.dll
/f7Vkbh7X/plugins/scr64.dll
/f7Vkbh7X/scr.dll
/f7Vkbh7X/scr64.dll
/g9jjjbnAdshZ/clip.dll
/g9jjjbnAdshZ/cred.dll
/g9jjjbnAdshZ/clip64.dll
/g9jjjbnAdshZ/cred64.dll
/g9jjjbnAdshZ/index.php
/g9jjjbnAdshZ/login.php
/g9jjjbnAdshZ/plugins/clip.dll
/g9jjjbnAdshZ/plugins/clip64.dll
/g9jjjbnAdshZ/plugins/cred.dll
/g9jjjbnAdshZ/plugins/cred64.dll
/g9jjjbnAdshZ/plugins/scr.dll
/g9jjjbnAdshZ/plugins/scr64.dll
/g9jjjbnAdshZ/scr.dll
/g9jjjbnAdshZ/scr64.dll

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2024-01-23)

http://185.196.10.34
dot.tipinfolist.com
/f5dkvdSbC/clip.dll
/f5dkvdSbC/cred.dll
/f5dkvdSbC/clip64.dll
/f5dkvdSbC/cred64.dll
/f5dkvdSbC/index.php
/f5dkvdSbC/login.php
/f5dkvdSbC/plugins/clip.dll
/f5dkvdSbC/plugins/clip64.dll
/f5dkvdSbC/plugins/cred.dll
/f5dkvdSbC/plugins/cred64.dll
/f5dkvdSbC/plugins/scr.dll
/f5dkvdSbC/plugins/scr64.dll
/f5dkvdSbC/scr.dll
/f5dkvdSbC/scr64.dll

# Reference: https://www.bridewell.com/insights/blogs/detail/clearfake-campaign

http://185.172.128.21
http://185.172.128.28
http://185.172.128.54
http://185.172.128.71
http://185.172.128.99
http://68.178.148.77

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2024-02-04)

http://193.233.132.73
http://51.81.69.127
http://85.196.10.34
http://91.92.250.20
/gdf8jejdkd/clip.dll
/gdf8jejdkd/cred.dll
/gdf8jejdkd/clip64.dll
/gdf8jejdkd/cred64.dll
/gdf8jejdkd/index.php
/gdf8jejdkd/login.php
/gdf8jejdkd/plugins/clip.dll
/gdf8jejdkd/plugins/clip64.dll
/gdf8jejdkd/plugins/cred.dll
/gdf8jejdkd/plugins/cred64.dll
/gdf8jejdkd/plugins/scr.dll
/gdf8jejdkd/plugins/scr64.dll
/gdf8jejdkd/scr.dll
/gdf8jejdkd/scr64.dll
/gjvjlS3jd2V/clip.dll
/gjvjlS3jd2V/cred.dll
/gjvjlS3jd2V/clip64.dll
/gjvjlS3jd2V/cred64.dll
/gjvjlS3jd2V/index.php
/gjvjlS3jd2V/login.php
/gjvjlS3jd2V/plugins/clip.dll
/gjvjlS3jd2V/plugins/clip64.dll
/gjvjlS3jd2V/plugins/cred.dll
/gjvjlS3jd2V/plugins/cred64.dll
/gjvjlS3jd2V/plugins/scr.dll
/gjvjlS3jd2V/plugins/scr64.dll
/gjvjlS3jd2V/scr.dll
/gjvjlS3jd2V/scr64.dll
/jPdsj3d4M/clip.dll
/jPdsj3d4M/cred.dll
/jPdsj3d4M/clip64.dll
/jPdsj3d4M/cred64.dll
/jPdsj3d4M/index.php
/jPdsj3d4M/login.php
/jPdsj3d4M/plugins/clip.dll
/jPdsj3d4M/plugins/clip64.dll
/jPdsj3d4M/plugins/cred.dll
/jPdsj3d4M/plugins/cred64.dll
/jPdsj3d4M/plugins/scr.dll
/jPdsj3d4M/plugins/scr64.dll
/jPdsj3d4M/scr.dll
/jPdsj3d4M/scr64.dll

# Reference: https://www.virustotal.com/gui/file/43ea045cd4ebbf7a4b6c34820e1cf518a04ca3ce22b1ca14c5dcfd31afa73a63/detection

http://185.172.128.121

# Reference: https://www.virustotal.com/gui/file/3cea805f1396df15bdbcd4317388a046a41a6079dba04576a58ba7b2c812338a/detection

http://193.233.132.167

# Reference: https://www.virustotal.com/gui/file/c6d317e1eb756b3577414068ac20fc445921f4edd86bef21dbab2d89920e4649/detection

mbappeportal.shop

# Reference: https://www.virustotal.com/gui/file/13878fa249e211d6fe9a3fe49ad570829217e9a75f50fcdd268dc7a6bd1ab5c7/detection

http://185.172.128.126
http://185.172.128.187

# Reference: https://twitter.com/banthisguy9349/status/1769999255228367090
# Reference: https://www.virustotal.com/gui/ip-address/45.95.11.69/relations
# Reference: https://www.virustotal.com/gui/file/d8f1979b2b2a3d59db7716e40738d5d2a3d557055831e54f8e1f52079dd04aa5/detection

http://5.42.64.44
http://91.92.250.47
564675367.xyz
/BlsSwk93eX/clip.dll
/BlsSwk93eX/cred.dll
/BlsSwk93eX/clip64.dll
/BlsSwk93eX/cred64.dll
/BlsSwk93eX/index.php
/BlsSwk93eX/login.php
/BlsSwk93eX/plugins/clip.dll
/BlsSwk93eX/plugins/clip64.dll
/BlsSwk93eX/plugins/cred.dll
/BlsSwk93eX/plugins/cred64.dll
/BlsSwk93eX/plugins/scr.dll
/BlsSwk93eX/plugins/scr64.dll
/BlsSwk93eX/scr.dll
/BlsSwk93eX/scr64.dll

# Reference: https://threatfox.abuse.ch/browse/malware/win.amadey/ (# 2024-03-24)

http://147.45.47.35
http://194.87.71.43
http://5.42.67.14
http://91.92.242.139
cdn-analytic.com
topgamecheats.dev
/Pneh2sXQk0/clip.dll
/Pneh2sXQk0/cred.dll
/Pneh2sXQk0/clip64.dll
/Pneh2sXQk0/cred64.dll
/Pneh2sXQk0/index.php
/Pneh2sXQk0/login.php
/Pneh2sXQk0/plugins/clip.dll
/Pneh2sXQk0/plugins/clip64.dll
/Pneh2sXQk0/plugins/cred.dll
/Pneh2sXQk0/plugins/cred64.dll
/Pneh2sXQk0/plugins/scr.dll
/Pneh2sXQk0/plugins/scr64.dll
/Pneh2sXQk0/scr.dll
/Pneh2sXQk0/scr64.dll
/bDjkb2xSd/clip.dll
/bDjkb2xSd/cred.dll
/bDjkb2xSd/clip64.dll
/bDjkb2xSd/cred64.dll
/bDjkb2xSd/index.php
/bDjkb2xSd/login.php
/bDjkb2xSd/plugins/clip.dll
/bDjkb2xSd/plugins/clip64.dll
/bDjkb2xSd/plugins/cred.dll
/bDjkb2xSd/plugins/cred64.dll
/bDjkb2xSd/plugins/scr.dll
/bDjkb2xSd/plugins/scr64.dll
/bDjkb2xSd/scr.dll
/bDjkb2xSd/scr64.dll
/doctr8fb7z9/clip.dll
/doctr8fb7z9/cred.dll
/doctr8fb7z9/clip64.dll
/doctr8fb7z9/cred64.dll
/doctr8fb7z9/index.php
/doctr8fb7z9/login.php
/doctr8fb7z9/plugins/clip.dll
/doctr8fb7z9/plugins/clip64.dll
/doctr8fb7z9/plugins/cred.dll
/doctr8fb7z9/plugins/cred64.dll
/doctr8fb7z9/plugins/scr.dll
/doctr8fb7z9/plugins/scr64.dll
/doctr8fb7z9/scr.dll
/doctr8fb7z9/scr64.dll
/j4Fvskd3/clip.dll
/j4Fvskd3/cred.dll
/j4Fvskd3/clip64.dll
/j4Fvskd3/cred64.dll
/j4Fvskd3/index.php
/j4Fvskd3/login.php
/j4Fvskd3/plugins/clip.dll
/j4Fvskd3/plugins/clip64.dll
/j4Fvskd3/plugins/cred.dll
/j4Fvskd3/plugins/cred64.dll
/j4Fvskd3/plugins/scr.dll
/j4Fvskd3/plugins/scr64.dll
/j4Fvskd3/scr.dll
/j4Fvskd3/scr64.dll

# Reference: https://twitter.com/malpulse/status/1776327513137917987
# Reference: https://www.virustotal.com/gui/file/5fa605bf9666dc9486a83737d1f77e241bb27a033e609625499f17dbf608e840/detection
# Reference: https://www.virustotal.com/gui/file/97493f0316e2c240022929900de4c134df25c564e222831cbced4c2196894151/detection

http://195.211.124.144
bestofthebesttraining.com
platformforcreateinterest.com
pleasurecanbesafe.com
/8BvxwQdec3/clip.dll
/8BvxwQdec3/clip64.dll
/8BvxwQdec3/cred.dll
/8BvxwQdec3/cred64.dll
/8BvxwQdec3/index.php
/8BvxwQdec3/login.php
/8BvxwQdec3/plugins/clip.dll
/8BvxwQdec3/plugins/clip64.dll
/8BvxwQdec3/plugins/cred.dll
/8BvxwQdec3/plugins/cred64.dll
/8BvxwQdec3/plugins/scr.dll
/8BvxwQdec3/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/4b519894460800ca87bc75980c0689aaa4c569204a8976e10b548ffcdcfa5ae9/detection

http://193.233.132.56
/Pneh2sXQk0/clip.dll
/Pneh2sXQk0/clip64.dll
/Pneh2sXQk0/cred.dll
/Pneh2sXQk0/cred64.dll
/Pneh2sXQk0/index.php
/Pneh2sXQk0/login.php
/Pneh2sXQk0/plugins/clip.dll
/Pneh2sXQk0/plugins/clip64.dll
/Pneh2sXQk0/plugins/cred.dll
/Pneh2sXQk0/plugins/cred64.dll
/Pneh2sXQk0/plugins/scr.dll
/Pneh2sXQk0/plugins/scr64.dll

# Reference: https://www.virustotal.com/gui/file/08053adfeae7dd9c11597d685dffb87473ba9e1fbaf7c9bea32abe26cc1e1e93/detection

http://147.45.47.70
/tr8nomy/clip.dll
/tr8nomy/clip64.dll
/tr8nomy/cred.dll
/tr8nomy/cred64.dll
/tr8nomy/index.php
/tr8nomy/login.php
/tr8nomy/plugins/clip.dll
/tr8nomy/plugins/clip64.dll
/tr8nomy/plugins/cred.dll
/tr8nomy/plugins/cred64.dll
/tr8nomy/plugins/scr.dll
/tr8nomy/plugins/scr64.dll

# Reference: https://x.com/ShanHolo/status/1799358743408472473
# Reference: https://www.virustotal.com/gui/file/0adc51a81e63e89f233be4c86a26b1efaef4735b8bfe49b9c860e2a1b75136c7/detection

nudump.com
otyt.ru
selltix.org
jtpdev.co.uk/images/

# Reference: https://www.virustotal.com/gui/file/00191f19814a718551f3220b10ee59f5830e1feb73106121fd28459e74202a70/detection

http://147.45.47.155
/ku4Nor9/clip.dll
/ku4Nor9/clip64.dll
/ku4Nor9/cred.dll
/ku4Nor9/cred64.dll
/ku4Nor9/index.php
/ku4Nor9/login.php
/ku4Nor9/plugins/clip.dll
/ku4Nor9/plugins/clip64.dll
/ku4Nor9/plugins/cred.dll
/ku4Nor9/plugins/cred64.dll
/ku4Nor9/plugins/scr.dll
/ku4Nor9/plugins/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1803119613766508981
# Reference: https://www.virustotal.com/gui/file/488385cd54d14790b03fa7c7dc997ebea3f7b2a8499e5927eb437a3791102a77/detection

http://185.172.128.116
/Mb3GvQs8/clip.dll
/Mb3GvQs8/clip64.dll
/Mb3GvQs8/cred.dll
/Mb3GvQs8/cred64.dll
/Mb3GvQs8/index.php
/Mb3GvQs8/login.php
/Mb3GvQs8/plugins/clip.dll
/Mb3GvQs8/plugins/clip64.dll
/Mb3GvQs8/plugins/cred.dll
/Mb3GvQs8/plugins/cred64.dll
/Mb3GvQs8/plugins/scr.dll
/Mb3GvQs8/plugins/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1804812364451119217
# Reference: https://www.virustotal.com/gui/file/022bf939e575b38578560fbba65a4cbebc43e5fbb54983fc845dbbc81420ff7c/detection

check-ftp.ru

# Reference: https://x.com/banthisguy9349/status/1796136268918632724
# Reference: https://urlhaus.abuse.ch/url/2869213/

http://45.129.96.86

# Reference: https://x.com/banthisguy9349/status/1801610416948129964
# Reference: https://urlhaus.abuse.ch/host/77.91.77.80/
# Reference: https://www.virustotal.com/gui/file/1294c09f5596a284aebd6354304aad8f820bfebc94afcf1aa34eefc5e3bed03f/detection
# Reference: https://www.virustotal.com/gui/file/39345b9dc44db0aec3ceb63efa9f4b0bb74753da4fa421745acff9835f50debc/detection

http://106.166.173.36
http://45.197.47.193
http://77.91.77.80
http://77.91.77.81
http://77.91.77.82

# Reference: https://www.virustotal.com/gui/ip-address/45.140.19.240/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.152.112.146/relations
# Reference: https://www.virustotal.com/gui/ip-address/80.76.42.67/relations
# Reference: https://www.virustotal.com/gui/ip-address/94.103.183.66/relations
# Reference: https://www.virustotal.com/gui/file/f101c64d3b5435c00af570e23a3ef274ec7a86bdc17e6a48b6e76b955c252db4/detection

bestfitnessgymintheworld.com
brasseriehub.com
brasseriehub2.com
brasseriehub3.com
checkthebestofferyoucanget.com
creationofprogress.com
creatuniver-helper.com
creatuniver-helper2.com
creatuniver-helper3.com
culinarydownloads.com
domainneverknowdomainsecond.com
downloaddining.com
downloaddininghub.com
downloadfilesoft.com
downloadsoftfiles.com
expertinfoupdateworld.com
fastestfreecdn.com
filesoftdownload.com
findthebestopportunityforyou.com
innovupdates.com
makeagooddealbro.com
perspectivecdnforyourfastdelivery.com
proresupdate.com
responsibilitybridge.com
safesttravelintheworld.com
secretsuperdomainneverknownsecond.com
simple-updatereport.com
simple-updatereport2.com
simple-updatereport3.com
someniceglasseswithdiscount.com
theclientisalwaysright.com
/h9fmdW0/clip.dll
/h9fmdW0/cred.dll
/h9fmdW0/clip64.dll
/h9fmdW0/cred64.dll
/h9fmdW0/index.php
/h9fmdW0/login.php
/h9fmdW0/plugins/clip.dll
/h9fmdW0/plugins/clip64.dll
/h9fmdW0/plugins/cred.dll
/h9fmdW0/plugins/cred64.dll
/h9fmdW0/plugins/scr.dll
/h9fmdW0/plugins/scr64.dll
/h9fmdW0/scr.dll
/h9fmdW0/scr64.dll
/h9fmdW1/clip.dll
/h9fmdW1/cred.dll
/h9fmdW1/clip64.dll
/h9fmdW1/cred64.dll
/h9fmdW1/index.php
/h9fmdW1/login.php
/h9fmdW1/plugins/clip.dll
/h9fmdW1/plugins/clip64.dll
/h9fmdW1/plugins/cred.dll
/h9fmdW1/plugins/cred64.dll
/h9fmdW1/plugins/scr.dll
/h9fmdW1/plugins/scr64.dll
/h9fmdW1/scr.dll
/h9fmdW1/scr64.dll
/h9fmdW2/clip.dll
/h9fmdW2/cred.dll
/h9fmdW2/clip64.dll
/h9fmdW2/cred64.dll
/h9fmdW2/index.php
/h9fmdW2/login.php
/h9fmdW2/plugins/clip.dll
/h9fmdW2/plugins/clip64.dll
/h9fmdW2/plugins/cred.dll
/h9fmdW2/plugins/cred64.dll
/h9fmdW2/plugins/scr.dll
/h9fmdW2/plugins/scr64.dll
/h9fmdW2/scr.dll
/h9fmdW2/scr64.dll
/h9fmdW3/clip.dll
/h9fmdW3/cred.dll
/h9fmdW3/clip64.dll
/h9fmdW3/cred64.dll
/h9fmdW3/index.php
/h9fmdW3/login.php
/h9fmdW3/plugins/clip.dll
/h9fmdW3/plugins/clip64.dll
/h9fmdW3/plugins/cred.dll
/h9fmdW3/plugins/cred64.dll
/h9fmdW3/plugins/scr.dll
/h9fmdW3/plugins/scr64.dll
/h9fmdW3/scr.dll
/h9fmdW3/scr64.dll
/h9fmdW4/clip.dll
/h9fmdW4/cred.dll
/h9fmdW4/clip64.dll
/h9fmdW4/cred64.dll
/h9fmdW4/index.php
/h9fmdW4/login.php
/h9fmdW4/plugins/clip.dll
/h9fmdW4/plugins/clip64.dll
/h9fmdW4/plugins/cred.dll
/h9fmdW4/plugins/cred64.dll
/h9fmdW4/plugins/scr.dll
/h9fmdW4/plugins/scr64.dll
/h9fmdW4/scr.dll
/h9fmdW4/scr64.dll
/h9fmdW5/clip.dll
/h9fmdW5/cred.dll
/h9fmdW5/clip64.dll
/h9fmdW5/cred64.dll
/h9fmdW5/index.php
/h9fmdW5/login.php
/h9fmdW5/plugins/clip.dll
/h9fmdW5/plugins/clip64.dll
/h9fmdW5/plugins/cred.dll
/h9fmdW5/plugins/cred64.dll
/h9fmdW5/plugins/scr.dll
/h9fmdW5/plugins/scr64.dll
/h9fmdW5/scr.dll
/h9fmdW5/scr64.dll
/h9fmdW6/clip.dll
/h9fmdW6/cred.dll
/h9fmdW6/clip64.dll
/h9fmdW6/cred64.dll
/h9fmdW6/index.php
/h9fmdW6/login.php
/h9fmdW6/plugins/clip.dll
/h9fmdW6/plugins/clip64.dll
/h9fmdW6/plugins/cred.dll
/h9fmdW6/plugins/cred64.dll
/h9fmdW6/plugins/scr.dll
/h9fmdW6/plugins/scr64.dll
/h9fmdW6/scr.dll
/h9fmdW6/scr64.dll
/h9fmdW7/clip.dll
/h9fmdW7/cred.dll
/h9fmdW7/clip64.dll
/h9fmdW7/cred64.dll
/h9fmdW7/index.php
/h9fmdW7/login.php
/h9fmdW7/plugins/clip.dll
/h9fmdW7/plugins/clip64.dll
/h9fmdW7/plugins/cred.dll
/h9fmdW7/plugins/cred64.dll
/h9fmdW7/plugins/scr.dll
/h9fmdW7/plugins/scr64.dll
/h9fmdW7/scr.dll
/h9fmdW7/scr64.dll
/h9fmdW8/clip.dll
/h9fmdW8/cred.dll
/h9fmdW8/clip64.dll
/h9fmdW8/cred64.dll
/h9fmdW8/index.php
/h9fmdW8/login.php
/h9fmdW8/plugins/clip.dll
/h9fmdW8/plugins/clip64.dll
/h9fmdW8/plugins/cred.dll
/h9fmdW8/plugins/cred64.dll
/h9fmdW8/plugins/scr.dll
/h9fmdW8/plugins/scr64.dll
/h9fmdW8/scr.dll
/h9fmdW8/scr64.dll
/h9fmdW9/clip.dll
/h9fmdW9/cred.dll
/h9fmdW9/clip64.dll
/h9fmdW9/cred64.dll
/h9fmdW9/index.php
/h9fmdW9/login.php
/h9fmdW9/plugins/clip.dll
/h9fmdW9/plugins/clip64.dll
/h9fmdW9/plugins/cred.dll
/h9fmdW9/plugins/cred64.dll
/h9fmdW9/plugins/scr.dll
/h9fmdW9/plugins/scr64.dll
/h9fmdW9/scr.dll
/h9fmdW9/scr64.dll

# Reference: https://x.com/RacWatchin8872/status/1816762340777300358

http://185.215.113.16
http://185.215.113.19

# Reference: https://x.com/banthisguy9349/status/1818336577820717395
# Reference: https://urlhaus.abuse.ch/host/185.215.113.101

/g99kdj4vsA/clip.dll
/g99kdj4vsA/cred.dll
/g99kdj4vsA/clip64.dll
/g99kdj4vsA/cred64.dll
/g99kdj4vsA/index.php
/g99kdj4vsA/login.php
/g99kdj4vsA/plugins/clip.dll
/g99kdj4vsA/plugins/clip64.dll
/g99kdj4vsA/plugins/cred.dll
/g99kdj4vsA/plugins/cred64.dll
/g99kdj4vsA/plugins/scr.dll
/g99kdj4vsA/plugins/scr64.dll
/g99kdj4vsA/scr.dll
/g99kdj4vsA/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1819370839013228574
# Reference: https://app.validin.com/detail?find=FAQ%20%D0%9F%D0%BE%20%D0%BA%D0%B0%D0%BD%D0%B0%D0%BB%D0%B0%D0%BC&type=raw&ref_id=30882b131ba#tab=host_pairs_v2
# Reference: https://www.virustotal.com/gui/file/29ef50dbb1157e5cad5eef40f64ea9c0a0f4a7c8e57e1b69b586b04cf0bb20e6/detection

http://82.147.85.52
http://82.147.85.65
/Jo89Ku7d/clip.dll
/Jo89Ku7d/cred.dll
/Jo89Ku7d/clip64.dll
/Jo89Ku7d/cred64.dll
/Jo89Ku7d/index.php
/Jo89Ku7d/login.php
/Jo89Ku7d/plugins/clip.dll
/Jo89Ku7d/plugins/clip64.dll
/Jo89Ku7d/plugins/cred.dll
/Jo89Ku7d/plugins/cred64.dll
/Jo89Ku7d/plugins/scr.dll
/Jo89Ku7d/plugins/scr64.dll
/Jo89Ku7d/scr.dll
/Jo89Ku7d/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1821922837021561321
# Reference: https://x.com/banthisguy9349/status/1821919763733368906
# Reference: https://urlhaus.abuse.ch/browse/tag/attacker/

http://94.103.183.51
bienupdate.xyz
creativenotes.cloud
eateryhub.xyz
fastupdate.pro
filecentral-tips.com
filecentral-tips2.com
filecentral-tips3.com
foodiecorner.rest
industrystats.store
itresources.lol
updateloop.xyz
ama.eateryhub.xyz
ama.fastupdate.pro
ama.foodiecorner.rest
ama.industrystats.store
ama.itresources.lol
clp.creativenotes.cloud
clp.eateryhub.xyz
clp.foodiecorner.rest
clp.industrystats.store
clp.itresources.lol
ghost.foodiecorner.rest
/h9fmdW5/clip.dll
/h9fmdW5/cred.dll
/h9fmdW5/clip64.dll
/h9fmdW5/cred64.dll
/h9fmdW5/Header.php
/h9fmdW5/index.php
/h9fmdW5/login.php
/h9fmdW5/plugins/clip.dll
/h9fmdW5/plugins/clip64.dll
/h9fmdW5/plugins/cred.dll
/h9fmdW5/plugins/cred64.dll
/h9fmdW5/plugins/scr.dll
/h9fmdW5/plugins/scr64.dll
/h9fmdW5/scr.dll
/h9fmdW5/scr64.dll
/scar/attacker

# Reference: https://x.com/banthisguy9349/status/1822194818291823009
# Reference: https://x.com/banthisguy9349/status/1822268032497877144
# Reference: https://x.com/banthisguy9349/status/1822280513714864171
# Reference: https://pastebin.com/MTL6jSK2

http://154.216.18.105
http://185.196.11.123
http://185.208.158.115
http://185.208.158.116
actualisation-service.com
api.garageserviceoperation.com
garageserviceoperation.com
ruspyc.top
/CoreOPT/clip.dll
/CoreOPT/cred.dll
/CoreOPT/clip64.dll
/CoreOPT/cred64.dll
/CoreOPT/Header.php
/CoreOPT/index.php
/CoreOPT/login.php
/CoreOPT/plugins/clip.dll
/CoreOPT/plugins/clip64.dll
/CoreOPT/plugins/cred.dll
/CoreOPT/plugins/cred64.dll
/CoreOPT/plugins/scr.dll
/CoreOPT/plugins/scr64.dll
/CoreOPT/scr.dll
/CoreOPT/scr64.dll
/Vi9leo/clip.dll
/Vi9leo/cred.dll
/Vi9leo/clip64.dll
/Vi9leo/cred64.dll
/Vi9leo/Header.php
/Vi9leo/index.php
/Vi9leo/login.php
/Vi9leo/plugins/clip.dll
/Vi9leo/plugins/clip64.dll
/Vi9leo/plugins/cred.dll
/Vi9leo/plugins/cred64.dll
/Vi9leo/plugins/scr.dll
/Vi9leo/plugins/scr64.dll
/Vi9leo/scr.dll
/Vi9leo/scr64.dll
/h9k4kfklCdszZ3/clip.dll
/h9k4kfklCdszZ3/cred.dll
/h9k4kfklCdszZ3/clip64.dll
/h9k4kfklCdszZ3/cred64.dll
/h9k4kfklCdszZ3/Header.php
/h9k4kfklCdszZ3/index.php
/h9k4kfklCdszZ3/login.php
/h9k4kfklCdszZ3/plugins/clip.dll
/h9k4kfklCdszZ3/plugins/clip64.dll
/h9k4kfklCdszZ3/plugins/cred.dll
/h9k4kfklCdszZ3/plugins/cred64.dll
/h9k4kfklCdszZ3/plugins/scr.dll
/h9k4kfklCdszZ3/plugins/scr64.dll
/h9k4kfklCdszZ3/scr.dll
/h9k4kfklCdszZ3/scr64.dll
/hb9IvshS01/clip.dll
/hb9IvshS01/cred.dll
/hb9IvshS01/clip64.dll
/hb9IvshS01/cred64.dll
/hb9IvshS01/Header.php
/hb9IvshS01/index.php
/hb9IvshS01/login.php
/hb9IvshS01/plugins/clip.dll
/hb9IvshS01/plugins/clip64.dll
/hb9IvshS01/plugins/cred.dll
/hb9IvshS01/plugins/cred64.dll
/hb9IvshS01/plugins/scr.dll
/hb9IvshS01/plugins/scr64.dll
/hb9IvshS01/scr.dll
/hb9IvshS01/scr64.dll
/Jo89Ku7d/clip.dll
/Jo89Ku7d/cred.dll
/Jo89Ku7d/clip64.dll
/Jo89Ku7d/cred64.dll
/Jo89Ku7d/Header.php
/Jo89Ku7d/index.php
/Jo89Ku7d/login.php
/Jo89Ku7d/plugins/clip.dll
/Jo89Ku7d/plugins/clip64.dll
/Jo89Ku7d/plugins/cred.dll
/Jo89Ku7d/plugins/cred64.dll
/Jo89Ku7d/plugins/scr.dll
/Jo89Ku7d/plugins/scr64.dll
/Jo89Ku7d/scr.dll
/Jo89Ku7d/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1822212383445545359

businesshub.pics
cuisineupdates.online
newtech.lol
resourcegate.lol
ama.businesshub.pics
ama.cuisineupdates.online
ama.newtech.lol
ama.resourcegate.lol
clp.businesshub.pics
clp.cuisineupdates.online
clp.fastupdate.pro
clp.newtech.lol
clp.resourcegate.lol

# Reference: https://www.virustotal.com/gui/file/f2711d81795e47dd52e429cfcce777001725b85efb0a84ed5f0c6a7c8e28c3f9/detection

/h9k4kfklCdsj3_zZ2/clip.dll
/h9k4kfklCdsj3_zZ2/cred.dll
/h9k4kfklCdsj3_zZ2/clip64.dll
/h9k4kfklCdsj3_zZ2/cred64.dll
/h9k4kfklCdsj3_zZ2/Header.php
/h9k4kfklCdsj3_zZ2/index.php
/h9k4kfklCdsj3_zZ2/login.php
/h9k4kfklCdsj3_zZ2/plugins/clip.dll
/h9k4kfklCdsj3_zZ2/plugins/clip64.dll
/h9k4kfklCdsj3_zZ2/plugins/cred.dll
/h9k4kfklCdsj3_zZ2/plugins/cred64.dll
/h9k4kfklCdsj3_zZ2/plugins/scr.dll
/h9k4kfklCdsj3_zZ2/plugins/scr64.dll
/h9k4kfklCdsj3_zZ2/scr.dll
/h9k4kfklCdsj3_zZ2/scr64.dll
/h9k4kfklCdsj3_zZ3/clip.dll
/h9k4kfklCdsj3_zZ3/cred.dll
/h9k4kfklCdsj3_zZ3/clip64.dll
/h9k4kfklCdsj3_zZ3/cred64.dll
/h9k4kfklCdsj3_zZ3/Header.php
/h9k4kfklCdsj3_zZ3/index.php
/h9k4kfklCdsj3_zZ3/login.php
/h9k4kfklCdsj3_zZ3/plugins/clip.dll
/h9k4kfklCdsj3_zZ3/plugins/clip64.dll
/h9k4kfklCdsj3_zZ3/plugins/cred.dll
/h9k4kfklCdsj3_zZ3/plugins/cred64.dll
/h9k4kfklCdsj3_zZ3/plugins/scr.dll
/h9k4kfklCdsj3_zZ3/plugins/scr64.dll
/h9k4kfklCdsj3_zZ3/scr.dll
/h9k4kfklCdsj3_zZ3/scr64.dll
/h9k4kfklCdsj3_zZz/clip.dll
/h9k4kfklCdsj3_zZz/cred.dll
/h9k4kfklCdsj3_zZz/clip64.dll
/h9k4kfklCdsj3_zZz/cred64.dll
/h9k4kfklCdsj3_zZz/Header.php
/h9k4kfklCdsj3_zZz/index.php
/h9k4kfklCdsj3_zZz/login.php
/h9k4kfklCdsj3_zZz/plugins/clip.dll
/h9k4kfklCdsj3_zZz/plugins/clip64.dll
/h9k4kfklCdsj3_zZz/plugins/cred.dll
/h9k4kfklCdsj3_zZz/plugins/cred64.dll
/h9k4kfklCdsj3_zZz/plugins/scr.dll
/h9k4kfklCdsj3_zZz/plugins/scr64.dll
/h9k4kfklCdsj3_zZz/scr.dll
/h9k4kfklCdsj3_zZz/scr64.dll

# Reference: https://www.virustotal.com/gui/ip-address/45.140.19.240/relations

resourcedownloadslatin.com

# Reference: https://x.com/banthisguy9349/status/1823401273862889662

http://94.103.193.51

# Reference: https://x.com/banthisguy9349/status/1824428270072320315

http://46.8.229.59

# Reference: https://www.virustotal.com/gui/file/77cabe45b3738612da31d94986c46fd3a4abfeef80d3c325870b7d0a86fa4be1/detection

http://193.233.132.139
/sev56rkm/clip.dll
/sev56rkm/cred.dll
/sev56rkm/clip64.dll
/sev56rkm/cred64.dll
/sev56rkm/Header.php
/sev56rkm/index.php
/sev56rkm/login.php
/sev56rkm/plugins/clip.dll
/sev56rkm/plugins/clip64.dll
/sev56rkm/plugins/cred.dll
/sev56rkm/plugins/cred64.dll
/sev56rkm/plugins/scr.dll
/sev56rkm/plugins/scr64.dll
/sev56rkm/scr.dll
/sev56rkm/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1825133749664727435
# Reference: https://x.com/momomopas/status/1825149488526426232
# Reference: https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.ssh.server_host_key.fingerprint_sha256%3A+9f7f44e3eeb1033afd2c4ce2b5ab417ad78120330a74b9948eb8010c92697ab7
# Reference: https://www.virustotal.com/gui/file/0715ee197bdd9eb73cf62a6c67d36d4f9f49a9d4bea50c4fa79a1d33559528ae/detection

http://31.41.244.9
http://31.41.244.10
http://31.41.244.11
http://31.41.244.12
/Dem7kTu/clip.dll
/Dem7kTu/cred.dll
/Dem7kTu/clip64.dll
/Dem7kTu/cred64.dll
/Dem7kTu/Header.php
/Dem7kTu/index.php
/Dem7kTu/login.php
/Dem7kTu/plugins/clip.dll
/Dem7kTu/plugins/clip64.dll
/Dem7kTu/plugins/cred.dll
/Dem7kTu/plugins/cred64.dll
/Dem7kTu/plugins/scr.dll
/Dem7kTu/plugins/scr64.dll
/Dem7kTu/scr.dll
/Dem7kTu/scr64.dll
/guba/rama.exe

# Reference: https://www.virustotal.com/gui/file/92c180e46e13047366bf1c002f443c744b8cb1acdcdb1614518659e17d623eb6/detection

http://91.92.242.106
/g9bkfkWf/clip.dll
/g9bkfkWf/cred.dll
/g9bkfkWf/clip64.dll
/g9bkfkWf/cred64.dll
/g9bkfkWf/Header.php
/g9bkfkWf/index.php
/g9bkfkWf/login.php
/g9bkfkWf/plugins/clip.dll
/g9bkfkWf/plugins/clip64.dll
/g9bkfkWf/plugins/cred.dll
/g9bkfkWf/plugins/cred64.dll
/g9bkfkWf/plugins/scr.dll
/g9bkfkWf/plugins/scr64.dll
/g9bkfkWf/scr.dll
/g9bkfkWf/scr64.dll

# Reference: https://x.com/NDA0E/status/1830308158864273649
# Reference: https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=ONLY&q=services.http.response.body%3D%22bolt%22

http://185.215.113.117
americanfinancialpartners.top
bankexpress.org
bankinternational.net
creamland.org
creditunionfund.net
debtunion.shop
detailed-finance.top
detailedfinances.com
detailedfinances.info
detailedfinances.shop
detailedleasing.net
fin-masters.com
finachcial.com
financemaster.shop
financemastersacademy.com
financemen.net
financesmasters.org
financesmasters.top
financesunion.com
financetoday.top
financetodayapp.com
financetrade.net
financial-advisors.top
financialagency.net
financialcorp.org
financialpartners.top
financialpartnersservices.com
financialsource.net
finmaster.top
finmastersusa.com
finmastersusa.top
finwizards.net
finwizards.org
jkfinancialpartners.com
managementcorp.net
managementsolution.top
mavidjipro.com
meticulousfinance.top
newunioncredit.org
personal-training.shop
pinnaclemoney.org
privatefinancetoday.net
qualityfinance.net
servicescorp.shop
servicesllc.top
smartfinancecard.org
specialbids.com
specialcoupons.net
specialcoupons.top
specialoffersnow.net
specialpromoter.net
unioncredits.shop
uniondebit.com

# Reference: https://x.com/banthisguy9349/status/1835302757386854768

filetip-resourcecloud.com
filetip-resourcecloud2.com
filetip-resourcecloud3.com

# Reference: https://www.virustotal.com/gui/file/2971e3b4c072b31004c2caa9d059ae92ee40a14253cb958bcf393080d2aaa723/detection

conditionprovice.pro

# Reference: https://www.virustotal.com/gui/file/14b399689c345e1f9466c35323f1a03f02b4bd1766e338759f405f0feea9610e/detection

cdnforbusiness.com
/7vAficZogD/clip.dll
/7vAficZogD/cred.dll
/7vAficZogD/clip64.dll
/7vAficZogD/cred64.dll
/7vAficZogD/Header.php
/7vAficZogD/index.php
/7vAficZogD/login.php
/7vAficZogD/plugins/clip.dll
/7vAficZogD/plugins/clip64.dll
/7vAficZogD/plugins/cred.dll
/7vAficZogD/plugins/cred64.dll
/7vAficZogD/plugins/scr.dll
/7vAficZogD/plugins/scr64.dll
/7vAficZogD/scr.dll
/7vAficZogD/scr64.dll

# Reference: https://www.virustotal.com/gui/file/058568694a17bd3f207e781b34142ae46243c696ec9df1db105dd3827a1024d9/detection

kindofwelcomeperspective.com

# Reference: https://www.virustotal.com/gui/file/058568694a17bd3f207e781b34142ae46243c696ec9df1db105dd3827a1024d9/detection

http://135.181.22.88
xycydau0.fun
rtattack.xycydau0.fun

# Reference: https://www.virustotal.com/gui/file/088a70387cbb86815c845a40d68843254aa03dd258b228e0d9d91586ba639c87/detection

greatnessappreviews.com

# Reference: https://app.validin.com/detail?find=173.255.204.62&type=ip4&ref_id=04a1ac2c8a9#tab=resolutions

returnofspace.com

# Reference: https://x.com/cyberfeeddigest/status/1840108136025539034
# Reference: https://app.validin.com/detail?find=46.8.229.59&type=ip4&ref_id=345b2750e6d#tab=resolutions

expertbigworldupdate.com
expertbigworldupdate2.com
expertbigworldupdate3.com
innovupdates2.com
innovupdates3.com
resourcedownloadslatin2.com
resourcedownloadslatin3.com
tipinfodownload-soft1.com
tipinfodownload-soft2.com
tipinfodownload-soft3.com

# Reference: https://www.virustotal.com/gui/file/6b89cdfe0d3ebc90994ee564aac9c88b0df80f25720aedadff660a0d079ad0c9/detection

http://45.202.35.101
/pLQvfD4d/clip.dll
/pLQvfD4d/cred.dll
/pLQvfD4d/clip64.dll
/pLQvfD4d/cred64.dll
/pLQvfD4d/Header.php
/pLQvfD4d/index.php
/pLQvfD4d/login.php
/pLQvfD4d/plugins/clip.dll
/pLQvfD4d/plugins/clip64.dll
/pLQvfD4d/plugins/cred.dll
/pLQvfD4d/plugins/cred64.dll
/pLQvfD4d/plugins/scr.dll
/pLQvfD4d/plugins/scr64.dll
/pLQvfD4d/scr.dll
/pLQvfD4d/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1846618516407083443

http://185.11.61.121
http://78.153.139.168
amoamosss.com
amoamoxxx.org
specificsecurity.ru
/gfj38cHcw/clip.dll
/gfj38cHcw/cred.dll
/gfj38cHcw/clip64.dll
/gfj38cHcw/cred64.dll
/gfj38cHcw/Header.php
/gfj38cHcw/index.php
/gfj38cHcw/login.php
/gfj38cHcw/plugins/clip.dll
/gfj38cHcw/plugins/clip64.dll
/gfj38cHcw/plugins/cred.dll
/gfj38cHcw/plugins/cred64.dll
/gfj38cHcw/plugins/scr.dll
/gfj38cHcw/plugins/scr64.dll
/gfj38cHcw/scr.dll
/gfj38cHcw/scr64.dll
/h8s9k20gnb2/clip.dll
/h8s9k20gnb2/cred.dll
/h8s9k20gnb2/clip64.dll
/h8s9k20gnb2/cred64.dll
/h8s9k20gnb2/Header.php
/h8s9k20gnb2/index.php
/h8s9k20gnb2/login.php
/h8s9k20gnb2/plugins/clip.dll
/h8s9k20gnb2/plugins/clip64.dll
/h8s9k20gnb2/plugins/cred.dll
/h8s9k20gnb2/plugins/cred64.dll
/h8s9k20gnb2/plugins/scr.dll
/h8s9k20gnb2/plugins/scr64.dll
/h8s9k20gnb2/scr.dll
/h8s9k20gnb2/scr64.dll
/NfjxzZz9jn/clip.dll
/NfjxzZz9jn/cred.dll
/NfjxzZz9jn/clip64.dll
/NfjxzZz9jn/cred64.dll
/NfjxzZz9jn/Header.php
/NfjxzZz9jn/index.php
/NfjxzZz9jn/login.php
/NfjxzZz9jn/plugins/clip.dll
/NfjxzZz9jn/plugins/clip64.dll
/NfjxzZz9jn/plugins/cred.dll
/NfjxzZz9jn/plugins/cred64.dll
/NfjxzZz9jn/plugins/scr.dll
/NfjxzZz9jn/plugins/scr64.dll
/NfjxzZz9jn/scr.dll
/NfjxzZz9jn/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1847584450445561928

http://152.89.198.124
/8bdDsv3dk2FF/clip.dll
/8bdDsv3dk2FF/cred.dll
/8bdDsv3dk2FF/clip64.dll
/8bdDsv3dk2FF/cred64.dll
/8bdDsv3dk2FF/Header.php
/8bdDsv3dk2FF/index.php
/8bdDsv3dk2FF/login.php
/8bdDsv3dk2FF/plugins/clip.dll
/8bdDsv3dk2FF/plugins/clip64.dll
/8bdDsv3dk2FF/plugins/cred.dll
/8bdDsv3dk2FF/plugins/cred64.dll
/8bdDsv3dk2FF/plugins/scr.dll
/8bdDsv3dk2FF/plugins/scr64.dll
/8bdDsv3dk2FF/scr.dll
/8bdDsv3dk2FF/scr64.dll

# Reference: https://www.inde.nz/blog/converging-paths-analysis-of-recent-lumma-stealer-campaigns
# Reference: https://www.virustotal.com/gui/file/4319d0baa8873b0af28c7b46c834fb52c5277af49e1acf7c3cb706bdec2cdd41/detection
# Reference: https://www.virustotal.com/gui/file/6d5c042d75b66982548dec466541e80da91b89f1020e3260e5de7301c423919c/detection

em3r30.updateexpert.shop
/pLQvfD4d5/clip.dll
/pLQvfD4d5/cred.dll
/pLQvfD4d5/clip64.dll
/pLQvfD4d5/cred64.dll
/pLQvfD4d5/Header.php
/pLQvfD4d5/index.php
/pLQvfD4d5/login.php
/pLQvfD4d5/plugins/clip.dll
/pLQvfD4d5/plugins/clip64.dll
/pLQvfD4d5/plugins/cred.dll
/pLQvfD4d5/plugins/cred64.dll
/pLQvfD4d5/plugins/scr.dll
/pLQvfD4d5/plugins/scr64.dll
/pLQvfD4d5/scr.dll
/pLQvfD4d5/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1852095954058645762

http://154.216.18.163
http://185.215.113.217
http://45.93.20.135
/5nDshOg3cwA/clip.dll
/5nDshOg3cwA/cred.dll
/5nDshOg3cwA/clip64.dll
/5nDshOg3cwA/cred64.dll
/5nDshOg3cwA/Header.php
/5nDshOg3cwA/index.php
/5nDshOg3cwA/login.php
/5nDshOg3cwA/plugins/clip.dll
/5nDshOg3cwA/plugins/clip64.dll
/5nDshOg3cwA/plugins/cred.dll
/5nDshOg3cwA/plugins/cred64.dll
/5nDshOg3cwA/plugins/scr.dll
/5nDshOg3cwA/plugins/scr64.dll
/5nDshOg3cwA/scr.dll
/5nDshOg3cwA/scr64.dll
/DbjC3fksE/clip.dll
/DbjC3fksE/cred.dll
/DbjC3fksE/clip64.dll
/DbjC3fksE/cred64.dll
/DbjC3fksE/Header.php
/DbjC3fksE/index.php
/DbjC3fksE/login.php
/DbjC3fksE/plugins/clip.dll
/DbjC3fksE/plugins/clip64.dll
/DbjC3fksE/plugins/cred.dll
/DbjC3fksE/plugins/cred64.dll
/DbjC3fksE/plugins/scr.dll
/DbjC3fksE/plugins/scr64.dll
/DbjC3fksE/scr.dll
/DbjC3fksE/scr64.dll
/t9bdjZsL2/clip.dll
/t9bdjZsL2/cred.dll
/t9bdjZsL2/clip64.dll
/t9bdjZsL2/cred64.dll
/t9bdjZsL2/Header.php
/t9bdjZsL2/index.php
/t9bdjZsL2/login.php
/t9bdjZsL2/plugins/clip.dll
/t9bdjZsL2/plugins/clip64.dll
/t9bdjZsL2/plugins/cred.dll
/t9bdjZsL2/plugins/cred64.dll
/t9bdjZsL2/plugins/scr.dll
/t9bdjZsL2/plugins/scr64.dll
/t9bdjZsL2/scr.dll
/t9bdjZsL2/scr64.dll

# Reference: https://www.virustotal.com/gui/file/2a6d9c601976ec8913e3d8d2d4fe03f6cf5d2110c366f9f98a8faeeb00261ea0/detection

papka0.top
sosipisos.cc

# Reference: https://x.com/banthisguy9349/status/1852401529300439042
# Reference: https://www.virustotal.com/gui/file/1a085e145268798a5d9cb955eb3ab785b76e5c1aef2ff60fed45d81fcb8e2421/detection

dukastotranza.click
smartkontur.site
/NfjxzZz1jn/clip.dll
/NfjxzZz1jn/cred.dll
/NfjxzZz1jn/clip64.dll
/NfjxzZz1jn/cred64.dll
/NfjxzZz1jn/Header.php
/NfjxzZz1jn/index.php
/NfjxzZz1jn/login.php
/NfjxzZz1jn/plugins/clip.dll
/NfjxzZz1jn/plugins/clip64.dll
/NfjxzZz1jn/plugins/cred.dll
/NfjxzZz1jn/plugins/cred64.dll
/NfjxzZz1jn/plugins/scr.dll
/NfjxzZz1jn/plugins/scr64.dll
/NfjxzZz1jn/scr.dll
/NfjxzZz1jn/scr64.dll
/NfjxzZz2jn/clip.dll
/NfjxzZz2jn/cred.dll
/NfjxzZz2jn/clip64.dll
/NfjxzZz2jn/cred64.dll
/NfjxzZz2jn/Header.php
/NfjxzZz2jn/index.php
/NfjxzZz2jn/login.php
/NfjxzZz2jn/plugins/clip.dll
/NfjxzZz2jn/plugins/clip64.dll
/NfjxzZz2jn/plugins/cred.dll
/NfjxzZz2jn/plugins/cred64.dll
/NfjxzZz2jn/plugins/scr.dll
/NfjxzZz2jn/plugins/scr64.dll
/NfjxzZz2jn/scr.dll
/NfjxzZz2jn/scr64.dll
/NfjxzZz3jn/clip.dll
/NfjxzZz3jn/cred.dll
/NfjxzZz3jn/clip64.dll
/NfjxzZz3jn/cred64.dll
/NfjxzZz3jn/Header.php
/NfjxzZz3jn/index.php
/NfjxzZz3jn/login.php
/NfjxzZz3jn/plugins/clip.dll
/NfjxzZz3jn/plugins/clip64.dll
/NfjxzZz3jn/plugins/cred.dll
/NfjxzZz3jn/plugins/cred64.dll
/NfjxzZz3jn/plugins/scr.dll
/NfjxzZz3jn/plugins/scr64.dll
/NfjxzZz3jn/scr.dll
/NfjxzZz3jn/scr64.dll
/NfjxzZz4jn/clip.dll
/NfjxzZz4jn/cred.dll
/NfjxzZz4jn/clip64.dll
/NfjxzZz4jn/cred64.dll
/NfjxzZz4jn/Header.php
/NfjxzZz4jn/index.php
/NfjxzZz4jn/login.php
/NfjxzZz4jn/plugins/clip.dll
/NfjxzZz4jn/plugins/clip64.dll
/NfjxzZz4jn/plugins/cred.dll
/NfjxzZz4jn/plugins/cred64.dll
/NfjxzZz4jn/plugins/scr.dll
/NfjxzZz4jn/plugins/scr64.dll
/NfjxzZz4jn/scr.dll
/NfjxzZz4jn/scr64.dll
/NfjxzZz5jn/clip.dll
/NfjxzZz5jn/cred.dll
/NfjxzZz5jn/clip64.dll
/NfjxzZz5jn/cred64.dll
/NfjxzZz5jn/Header.php
/NfjxzZz5jn/index.php
/NfjxzZz5jn/login.php
/NfjxzZz5jn/plugins/clip.dll
/NfjxzZz5jn/plugins/clip64.dll
/NfjxzZz5jn/plugins/cred.dll
/NfjxzZz5jn/plugins/cred64.dll
/NfjxzZz5jn/plugins/scr.dll
/NfjxzZz5jn/plugins/scr64.dll
/NfjxzZz5jn/scr.dll
/NfjxzZz5jn/scr64.dll
/NfjxzZz6jn/clip.dll
/NfjxzZz6jn/cred.dll
/NfjxzZz6jn/clip64.dll
/NfjxzZz6jn/cred64.dll
/NfjxzZz6jn/Header.php
/NfjxzZz6jn/index.php
/NfjxzZz6jn/login.php
/NfjxzZz6jn/plugins/clip.dll
/NfjxzZz6jn/plugins/clip64.dll
/NfjxzZz6jn/plugins/cred.dll
/NfjxzZz6jn/plugins/cred64.dll
/NfjxzZz6jn/plugins/scr.dll
/NfjxzZz6jn/plugins/scr64.dll
/NfjxzZz6jn/scr.dll
/NfjxzZz6jn/scr64.dll
/NfjxzZz7jn/clip.dll
/NfjxzZz7jn/cred.dll
/NfjxzZz7jn/clip64.dll
/NfjxzZz7jn/cred64.dll
/NfjxzZz7jn/Header.php
/NfjxzZz7jn/index.php
/NfjxzZz7jn/login.php
/NfjxzZz7jn/plugins/clip.dll
/NfjxzZz7jn/plugins/clip64.dll
/NfjxzZz7jn/plugins/cred.dll
/NfjxzZz7jn/plugins/cred64.dll
/NfjxzZz7jn/plugins/scr.dll
/NfjxzZz7jn/plugins/scr64.dll
/NfjxzZz7jn/scr.dll
/NfjxzZz7jn/scr64.dll
/NfjxzZz8jn/clip.dll
/NfjxzZz8jn/cred.dll
/NfjxzZz8jn/clip64.dll
/NfjxzZz8jn/cred64.dll
/NfjxzZz8jn/Header.php
/NfjxzZz8jn/index.php
/NfjxzZz8jn/login.php
/NfjxzZz8jn/plugins/clip.dll
/NfjxzZz8jn/plugins/clip64.dll
/NfjxzZz8jn/plugins/cred.dll
/NfjxzZz8jn/plugins/cred64.dll
/NfjxzZz8jn/plugins/scr.dll
/NfjxzZz8jn/plugins/scr64.dll
/NfjxzZz8jn/scr.dll
/NfjxzZz8jn/scr64.dll
/NfjxzZz9jn/clip.dll
/NfjxzZz9jn/cred.dll
/NfjxzZz9jn/clip64.dll
/NfjxzZz9jn/cred64.dll
/NfjxzZz9jn/Header.php
/NfjxzZz9jn/index.php
/NfjxzZz9jn/login.php
/NfjxzZz9jn/plugins/clip.dll
/NfjxzZz9jn/plugins/clip64.dll
/NfjxzZz9jn/plugins/cred.dll
/NfjxzZz9jn/plugins/cred64.dll
/NfjxzZz9jn/plugins/scr.dll
/NfjxzZz9jn/plugins/scr64.dll
/NfjxzZz9jn/scr.dll
/NfjxzZz9jn/scr64.dll

# Reference: https://www.virustotal.com/gui/file/83eaa1b744a80100205ef0df2fc1e0b161ae8e0deae153b9dcad6c889e76fd82/detection

stagingbyvdveen.com

# Reference: https://x.com/banthisguy9349/status/1856001454940504565

http://185.215.113.43

# Reference: https://www.virustotal.com/gui/file/7cf4786bf0f5d96cfea85fd3fc4796acc15a0b88f267fca43975d27a6430e6f0/detection

apsnn.com
/bVoZEtTa2/clip.dll
/bVoZEtTa2/cred.dll
/bVoZEtTa2/clip64.dll
/bVoZEtTa2/cred64.dll
/bVoZEtTa2/Header.php
/bVoZEtTa2/index.php
/bVoZEtTa2/login.php
/bVoZEtTa2/plugins/clip.dll
/bVoZEtTa2/plugins/clip64.dll
/bVoZEtTa2/plugins/cred.dll
/bVoZEtTa2/plugins/cred64.dll
/bVoZEtTa2/plugins/scr.dll
/bVoZEtTa2/plugins/scr64.dll
/bVoZEtTa2/scr.dll
/bVoZEtTa2/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1864683507315814674
# Reference: https://www.virustotal.com/gui/file/90ffbc37f8b47bf0d7c629a33e25828c42791133afc754380f1559f2f01f522a/detection

http://185.208.158.96
localload.network
/mzmtrpwoe113ee/clip.dll
/mzmtrpwoe113ee/cred.dll
/mzmtrpwoe113ee/clip64.dll
/mzmtrpwoe113ee/cred64.dll
/mzmtrpwoe113ee/Header.php
/mzmtrpwoe113ee/index.php
/mzmtrpwoe113ee/login.php
/mzmtrpwoe113ee/plugins/clip.dll
/mzmtrpwoe113ee/plugins/clip64.dll
/mzmtrpwoe113ee/plugins/cred.dll
/mzmtrpwoe113ee/plugins/cred64.dll
/mzmtrpwoe113ee/plugins/scr.dll
/mzmtrpwoe113ee/plugins/scr64.dll
/mzmtrpwoe113ee/scr.dll
/mzmtrpwoe113ee/scr64.dll
/mzmtrpwoe113eelxn/clip.dll
/mzmtrpwoe113eelxn/cred.dll
/mzmtrpwoe113eelxn/clip64.dll
/mzmtrpwoe113eelxn/cred64.dll
/mzmtrpwoe113eelxn/Header.php
/mzmtrpwoe113eelxn/index.php
/mzmtrpwoe113eelxn/login.php
/mzmtrpwoe113eelxn/plugins/clip.dll
/mzmtrpwoe113eelxn/plugins/clip64.dll
/mzmtrpwoe113eelxn/plugins/cred.dll
/mzmtrpwoe113eelxn/plugins/cred64.dll
/mzmtrpwoe113eelxn/plugins/scr.dll
/mzmtrpwoe113eelxn/plugins/scr64.dll
/mzmtrpwoe113eelxn/scr.dll
/mzmtrpwoe113eelxn/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1864282025579987072
# Reference: https://www.virustotal.com/gui/file/b0d2f4b13b6a9846dd047418f4d2a70ab9be53edba89b69c55da2491477bd5eb/detection

http://154.216.20.237
3434.filelu.cloud
/Gd84kkjf/clip.dll
/Gd84kkjf/cred.dll
/Gd84kkjf/clip64.dll
/Gd84kkjf/cred64.dll
/Gd84kkjf/Header.php
/Gd84kkjf/index.php
/Gd84kkjf/login.php
/Gd84kkjf/plugins/clip.dll
/Gd84kkjf/plugins/clip64.dll
/Gd84kkjf/plugins/cred.dll
/Gd84kkjf/plugins/cred64.dll
/Gd84kkjf/plugins/scr.dll
/Gd84kkjf/plugins/scr64.dll
/Gd84kkjf/scr.dll
/Gd84kkjf/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1864282025579987072
# Reference: https://www.virustotal.com/gui/file/d7b88f631a82b4dfec6b21d94e1d4e086064f1d7bcd30741b7c42b12f612a454/detection

http://185.215.113.43
/Zu7JuNko/clip.dll
/Zu7JuNko/cred.dll
/Zu7JuNko/clip64.dll
/Zu7JuNko/cred64.dll
/Zu7JuNko/Header.php
/Zu7JuNko/index.php
/Zu7JuNko/login.php
/Zu7JuNko/plugins/clip.dll
/Zu7JuNko/plugins/clip64.dll
/Zu7JuNko/plugins/cred.dll
/Zu7JuNko/plugins/cred64.dll
/Zu7JuNko/plugins/scr.dll
/Zu7JuNko/plugins/scr64.dll
/Zu7JuNko/scr.dll
/Zu7JuNko/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1864581315770601660

http://176.113.115.178
http://94.156.177.33
filelu.com
/5nDshOg3cwA/clip.dll
/5nDshOg3cwA/cred.dll
/5nDshOg3cwA/clip64.dll
/5nDshOg3cwA/cred64.dll
/5nDshOg3cwA/Header.php
/5nDshOg3cwA/index.php
/5nDshOg3cwA/login.php
/5nDshOg3cwA/plugins/clip.dll
/5nDshOg3cwA/plugins/clip64.dll
/5nDshOg3cwA/plugins/cred.dll
/5nDshOg3cwA/plugins/cred64.dll
/5nDshOg3cwA/plugins/scr.dll
/5nDshOg3cwA/plugins/scr64.dll
/5nDshOg3cwA/scr.dll
/5nDshOg3cwA/scr64.dll
/Dem7kTu/clip.dll
/Dem7kTu/cred.dll
/Dem7kTu/clip64.dll
/Dem7kTu/cred64.dll
/Dem7kTu/Header.php
/Dem7kTu/index.php
/Dem7kTu/login.php
/Dem7kTu/plugins/clip.dll
/Dem7kTu/plugins/clip64.dll
/Dem7kTu/plugins/cred.dll
/Dem7kTu/plugins/cred64.dll
/Dem7kTu/plugins/scr.dll
/Dem7kTu/plugins/scr64.dll
/Dem7kTu/scr.dll
/Dem7kTu/scr64.dll
/Fru7Nk9/clip.dll
/Fru7Nk9/cred.dll
/Fru7Nk9/clip64.dll
/Fru7Nk9/cred64.dll
/Fru7Nk9/Header.php
/Fru7Nk9/index.php
/Fru7Nk9/login.php
/Fru7Nk9/plugins/clip.dll
/Fru7Nk9/plugins/clip64.dll
/Fru7Nk9/plugins/cred.dll
/Fru7Nk9/plugins/cred64.dll
/Fru7Nk9/plugins/scr.dll
/Fru7Nk9/plugins/scr64.dll
/Fru7Nk9/scr.dll
/Fru7Nk9/scr64.dll
/h8s9k20gnb2/clip.dll
/h8s9k20gnb2/cred.dll
/h8s9k20gnb2/clip64.dll
/h8s9k20gnb2/cred64.dll
/h8s9k20gnb2/Header.php
/h8s9k20gnb2/index.php
/h8s9k20gnb2/login.php
/h8s9k20gnb2/plugins/clip.dll
/h8s9k20gnb2/plugins/clip64.dll
/h8s9k20gnb2/plugins/cred.dll
/h8s9k20gnb2/plugins/cred64.dll
/h8s9k20gnb2/plugins/scr.dll
/h8s9k20gnb2/plugins/scr64.dll
/h8s9k20gnb2/scr.dll
/h8s9k20gnb2/scr64.dll
/Lv2D7fGdopb/clip.dll
/Lv2D7fGdopb/cred.dll
/Lv2D7fGdopb/clip64.dll
/Lv2D7fGdopb/cred64.dll
/Lv2D7fGdopb/Header.php
/Lv2D7fGdopb/index.php
/Lv2D7fGdopb/login.php
/Lv2D7fGdopb/plugins/clip.dll
/Lv2D7fGdopb/plugins/clip64.dll
/Lv2D7fGdopb/plugins/cred.dll
/Lv2D7fGdopb/plugins/cred64.dll
/Lv2D7fGdopb/plugins/scr.dll
/Lv2D7fGdopb/plugins/scr64.dll
/Lv2D7fGdopb/scr.dll
/Lv2D7fGdopb/scr64.dll
/t9bdjZsL2/clip.dll
/t9bdjZsL2/cred.dll
/t9bdjZsL2/clip64.dll
/t9bdjZsL2/cred64.dll
/t9bdjZsL2/Header.php
/t9bdjZsL2/index.php
/t9bdjZsL2/login.php
/t9bdjZsL2/plugins/clip.dll
/t9bdjZsL2/plugins/clip64.dll
/t9bdjZsL2/plugins/cred.dll
/t9bdjZsL2/plugins/cred64.dll
/t9bdjZsL2/plugins/scr.dll
/t9bdjZsL2/plugins/scr64.dll
/t9bdjZsL2/scr.dll
/t9bdjZsL2/scr64.dll
/UDU6K3hhYW0YEN1K/clip.dll
/UDU6K3hhYW0YEN1K/cred.dll
/UDU6K3hhYW0YEN1K/clip64.dll
/UDU6K3hhYW0YEN1K/cred64.dll
/UDU6K3hhYW0YEN1K/Header.php
/UDU6K3hhYW0YEN1K/index.php
/UDU6K3hhYW0YEN1K/login.php
/UDU6K3hhYW0YEN1K/plugins/clip.dll
/UDU6K3hhYW0YEN1K/plugins/clip64.dll
/UDU6K3hhYW0YEN1K/plugins/cred.dll
/UDU6K3hhYW0YEN1K/plugins/cred64.dll
/UDU6K3hhYW0YEN1K/plugins/scr.dll
/UDU6K3hhYW0YEN1K/plugins/scr64.dll
/UDU6K3hhYW0YEN1K/scr.dll
/UDU6K3hhYW0YEN1K/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1864582057688436959

http://185.196.8.126
http://185.208.159.121
http://45.80.158.31
http://79.137.192.15
66.78.40.146.kyun.network
c-cdns.top

# Reference: https://x.com/banthisguy9349/status/1867211374406816077
# Reference: https://www.virustotal.com/gui/file/02cc9a1931ca1f4538aadcc093aac06c8a5851633b98d39304c58afd45c0feef/detection

http://80.82.65.70

# Reference: https://x.com/banthisguy9349/status/1868588323029262572

http://185.11.61.104
/7jbBdsS/clip.dll
/7jbBdsS/cred.dll
/7jbBdsS/clip64.dll
/7jbBdsS/cred64.dll
/7jbBdsS/Header.php
/7jbBdsS/index.php
/7jbBdsS/login.php
/7jbBdsS/plugins/clip.dll
/7jbBdsS/plugins/clip64.dll
/7jbBdsS/plugins/cred.dll
/7jbBdsS/plugins/cred64.dll
/7jbBdsS/plugins/scr.dll
/7jbBdsS/plugins/scr64.dll
/7jbBdsS/scr.dll
/7jbBdsS/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1868643210387722303
# Reference: https://www.virustotal.com/gui/ip-address/89.35.131.209/relations
# Reference: https://www.virustotal.com/gui/file/17f29ebe12b697ea77345bb9c0cf3c55c411783dc717c4bf5fa65e9af42686fa/detection

sanboxland.pro
/3ofn3jf3e2ljk/clip.dll
/3ofn3jf3e2ljk/cred.dll
/3ofn3jf3e2ljk/clip64.dll
/3ofn3jf3e2ljk/cred64.dll
/3ofn3jf3e2ljk/Header.php
/3ofn3jf3e2ljk/index.php
/3ofn3jf3e2ljk/login.php
/3ofn3jf3e2ljk/plugins/clip.dll
/3ofn3jf3e2ljk/plugins/clip64.dll
/3ofn3jf3e2ljk/plugins/cred.dll
/3ofn3jf3e2ljk/plugins/cred64.dll
/3ofn3jf3e2ljk/plugins/scr.dll
/3ofn3jf3e2ljk/plugins/scr64.dll
/3ofn3jf3e2ljk/scr.dll
/3ofn3jf3e2ljk/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1868646164532519064

http://185.216.214.217
http://185.81.68.147
http://185.81.68.148
http://62.60.226.15
http://77.91.68.70
gardenhub-fitlife.com
/0mYqX73dk3/clip.dll
/0mYqX73dk3/cred.dll
/0mYqX73dk3/clip64.dll
/0mYqX73dk3/cred64.dll
/0mYqX73dk3/Header.php
/0mYqX73dk3/index.php
/0mYqX73dk3/login.php
/0mYqX73dk3/plugins/clip.dll
/0mYqX73dk3/plugins/clip64.dll
/0mYqX73dk3/plugins/cred.dll
/0mYqX73dk3/plugins/cred64.dll
/0mYqX73dk3/plugins/scr.dll
/0mYqX73dk3/plugins/scr64.dll
/0mYqX73dk3/scr.dll
/0mYqX73dk3/scr64.dll
/5nDshOg3cwA/clip.dll
/5nDshOg3cwA/cred.dll
/5nDshOg3cwA/clip64.dll
/5nDshOg3cwA/cred64.dll
/5nDshOg3cwA/Header.php
/5nDshOg3cwA/index.php
/5nDshOg3cwA/login.php
/5nDshOg3cwA/plugins/clip.dll
/5nDshOg3cwA/plugins/clip64.dll
/5nDshOg3cwA/plugins/cred.dll
/5nDshOg3cwA/plugins/cred64.dll
/5nDshOg3cwA/plugins/scr.dll
/5nDshOg3cwA/plugins/scr64.dll
/5nDshOg3cwA/scr.dll
/5nDshOg3cwA/scr64.dll
/7vhfjke3/clip.dll
/7vhfjke3/cred.dll
/7vhfjke3/clip64.dll
/7vhfjke3/cred64.dll
/7vhfjke3/Header.php
/7vhfjke3/index.php
/7vhfjke3/login.php
/7vhfjke3/plugins/clip.dll
/7vhfjke3/plugins/clip64.dll
/7vhfjke3/plugins/cred.dll
/7vhfjke3/plugins/cred64.dll
/7vhfjke3/plugins/scr.dll
/7vhfjke3/plugins/scr64.dll
/7vhfjke3/scr.dll
/7vhfjke3/scr64.dll
/8Fvu5jh4DbS/clip.dll
/8Fvu5jh4DbS/cred.dll
/8Fvu5jh4DbS/clip64.dll
/8Fvu5jh4DbS/cred64.dll
/8Fvu5jh4DbS/Header.php
/8Fvu5jh4DbS/index.php
/8Fvu5jh4DbS/login.php
/8Fvu5jh4DbS/plugins/clip.dll
/8Fvu5jh4DbS/plugins/clip64.dll
/8Fvu5jh4DbS/plugins/cred.dll
/8Fvu5jh4DbS/plugins/cred64.dll
/8Fvu5jh4DbS/plugins/scr.dll
/8Fvu5jh4DbS/plugins/scr64.dll
/8Fvu5jh4DbS/scr.dll
/8Fvu5jh4DbS/scr64.dll
/8fj482jd9/clip.dll
/8fj482jd9/cred.dll
/8fj482jd9/clip64.dll
/8fj482jd9/cred64.dll
/8fj482jd9/Header.php
/8fj482jd9/index.php
/8fj482jd9/login.php
/8fj482jd9/plugins/clip.dll
/8fj482jd9/plugins/clip64.dll
/8fj482jd9/plugins/cred.dll
/8fj482jd9/plugins/cred64.dll
/8fj482jd9/plugins/scr.dll
/8fj482jd9/plugins/scr64.dll
/8fj482jd9/scr.dll
/8fj482jd9/scr64.dll
/Fru7Nk9/clip.dll
/Fru7Nk9/cred.dll
/Fru7Nk9/clip64.dll
/Fru7Nk9/cred64.dll
/Fru7Nk9/Header.php
/Fru7Nk9/index.php
/Fru7Nk9/login.php
/Fru7Nk9/plugins/clip.dll
/Fru7Nk9/plugins/clip64.dll
/Fru7Nk9/plugins/cred.dll
/Fru7Nk9/plugins/cred64.dll
/Fru7Nk9/plugins/scr.dll
/Fru7Nk9/plugins/scr64.dll
/Fru7Nk9/scr.dll
/Fru7Nk9/scr64.dll
/Lv2D7fGdopb/clip.dll
/Lv2D7fGdopb/cred.dll
/Lv2D7fGdopb/clip64.dll
/Lv2D7fGdopb/cred64.dll
/Lv2D7fGdopb/Header.php
/Lv2D7fGdopb/index.php
/Lv2D7fGdopb/login.php
/Lv2D7fGdopb/plugins/clip.dll
/Lv2D7fGdopb/plugins/clip64.dll
/Lv2D7fGdopb/plugins/cred.dll
/Lv2D7fGdopb/plugins/cred64.dll
/Lv2D7fGdopb/plugins/scr.dll
/Lv2D7fGdopb/plugins/scr64.dll
/Lv2D7fGdopb/scr.dll
/Lv2D7fGdopb/scr64.dll
/g8lvleE2z/clip.dll
/g8lvleE2z/cred.dll
/g8lvleE2z/clip64.dll
/g8lvleE2z/cred64.dll
/g8lvleE2z/Header.php
/g8lvleE2z/index.php
/g8lvleE2z/login.php
/g8lvleE2z/plugins/clip.dll
/g8lvleE2z/plugins/clip64.dll
/g8lvleE2z/plugins/cred.dll
/g8lvleE2z/plugins/cred64.dll
/g8lvleE2z/plugins/scr.dll
/g8lvleE2z/plugins/scr64.dll
/g8lvleE2z/scr.dll
/g8lvleE2z/scr64.dll
/g9jvjfd73/clip.dll
/g9jvjfd73/cred.dll
/g9jvjfd73/clip64.dll
/g9jvjfd73/cred64.dll
/g9jvjfd73/Header.php
/g9jvjfd73/index.php
/g9jvjfd73/login.php
/g9jvjfd73/plugins/clip.dll
/g9jvjfd73/plugins/clip64.dll
/g9jvjfd73/plugins/cred.dll
/g9jvjfd73/plugins/cred64.dll
/g9jvjfd73/plugins/scr.dll
/g9jvjfd73/plugins/scr64.dll
/g9jvjfd73/scr.dll
/g9jvjfd73/scr64.dll
/h8s9k20gnb2/clip.dll
/h8s9k20gnb2/cred.dll
/h8s9k20gnb2/clip64.dll
/h8s9k20gnb2/cred64.dll
/h8s9k20gnb2/Header.php
/h8s9k20gnb2/index.php
/h8s9k20gnb2/login.php
/h8s9k20gnb2/plugins/clip.dll
/h8s9k20gnb2/plugins/clip64.dll
/h8s9k20gnb2/plugins/cred.dll
/h8s9k20gnb2/plugins/cred64.dll
/h8s9k20gnb2/plugins/scr.dll
/h8s9k20gnb2/plugins/scr64.dll
/h8s9k20gnb2/scr.dll
/h8s9k20gnb2/scr64.dll
/MvwWdj2/clip.dll
/MvwWdj2/cred.dll
/MvwWdj2/clip64.dll
/MvwWdj2/cred64.dll
/MvwWdj2/Header.php
/MvwWdj2/index.php
/MvwWdj2/login.php
/MvwWdj2/plugins/clip.dll
/MvwWdj2/plugins/clip64.dll
/MvwWdj2/plugins/cred.dll
/MvwWdj2/plugins/cred64.dll
/MvwWdj2/plugins/scr.dll
/MvwWdj2/plugins/scr64.dll
/MvwWdj2/scr.dll
/MvwWdj2/scr64.dll

# Reference: https://x.com/JAMESWT_MHT/status/1881401294184939774
# Reference: https://app.any.run/tasks/a8ce9458-e3c0-4685-a988-bb7bc2740b78

rewiesbadcheked.com
verif-anti-bot.com

# Reference: https://www.virustotal.com/gui/file/3d826d585cb7118964d93d77628f61786118b4c1a2d9115ea36d3596699d8d96/detection

http://79.124.49.98
/Vjd3Dsljh/clip.dll
/Vjd3Dsljh/cred.dll
/Vjd3Dsljh/clip64.dll
/Vjd3Dsljh/cred64.dll
/Vjd3Dsljh/Header.php
/Vjd3Dsljh/index.php
/Vjd3Dsljh/login.php
/Vjd3Dsljh/plugins/clip.dll
/Vjd3Dsljh/plugins/clip64.dll
/Vjd3Dsljh/plugins/cred.dll
/Vjd3Dsljh/plugins/cred64.dll
/Vjd3Dsljh/plugins/scr.dll
/Vjd3Dsljh/plugins/scr64.dll
/Vjd3Dsljh/scr.dll
/Vjd3Dsljh/scr64.dll

# Reference: https://x.com/malwrhunterteam/status/1895754010738700685
# Reference: https://www.virustotal.com/gui/file/d7b6376c0b151d59c441153cd5a14d6b5f604d2d4ed16a73764d6722f77fe299/detection

http://72.5.43.226

# Reference: https://x.com/malwrhunterteam/status/1895754002115219859
# Reference: https://www.virustotal.com/gui/file/226f29856d561a38b1f0c145a699fb9a1916bc5bec2ae055e53d2b25b0d9baf5/detection

opautuclicker.com

# Reference: https://www.virustotal.com/gui/file/0ce9d9413815fe01e78b447ef493ae44946d3666018e15ac53002d75be2cff97/detection

http://176.113.115.6
cobolrationumelawrtewarms.com
/Ni9kiput/clip.dll
/Ni9kiput/cred.dll
/Ni9kiput/clip64.dll
/Ni9kiput/cred64.dll
/Ni9kiput/Header.php
/Ni9kiput/index.php
/Ni9kiput/login.php
/Ni9kiput/plugins/clip.dll
/Ni9kiput/plugins/clip64.dll
/Ni9kiput/plugins/cred.dll
/Ni9kiput/plugins/cred64.dll
/Ni9kiput/plugins/scr.dll
/Ni9kiput/plugins/scr64.dll
/Ni9kiput/scr.dll
/Ni9kiput/scr64.dll

# Reference: https://x.com/malwrhunterteam/status/1902117244269699134
# Reference: https://www.virustotal.com/gui/file/a6f67f9c38e9d5ca9e961ae219359ebe0686f9edc16aaf8775cc2a24abf515f0/detection

http://94.159.113.34
/b9kdj3s3C0/clip.dll
/b9kdj3s3C0/cred.dll
/b9kdj3s3C0/clip64.dll
/b9kdj3s3C0/cred64.dll
/b9kdj3s3C0/Header.php
/b9kdj3s3C0/index.php
/b9kdj3s3C0/login.php
/b9kdj3s3C0/plugins/clip.dll
/b9kdj3s3C0/plugins/clip64.dll
/b9kdj3s3C0/plugins/cred.dll
/b9kdj3s3C0/plugins/cred64.dll
/b9kdj3s3C0/plugins/scr.dll
/b9kdj3s3C0/plugins/scr64.dll
/b9kdj3s3C0/scr.dll
/b9kdj3s3C0/scr64.dll

# Reference: https://www.virustotal.com/gui/file/6661f357211982af77b74b32d5a4a33808c615fb5e73a11ff616a14b11916178/detection

http://45.93.20.224
italiyspain.info
/pNdj30Vs11/clip.dll
/pNdj30Vs11/cred.dll
/pNdj30Vs11/clip64.dll
/pNdj30Vs11/cred64.dll
/pNdj30Vs11/Header.php
/pNdj30Vs11/index.php
/pNdj30Vs11/login.php
/pNdj30Vs11/plugins/clip.dll
/pNdj30Vs11/plugins/clip64.dll
/pNdj30Vs11/plugins/cred.dll
/pNdj30Vs11/plugins/cred64.dll
/pNdj30Vs11/plugins/scr.dll
/pNdj30Vs11/plugins/scr64.dll
/pNdj30Vs11/scr.dll
/pNdj30Vs11/scr64.dll

# Reference: https://x.com/smica83/status/1905374175713181785
# Reference: https://www.virustotal.com/gui/file/c1d058773ea5e9775c2272604afc60c7db9d89f7a61c3286fd3c81fb4eae28aa/detection
# Reference: https://www.virustotal.com/gui/file/119aca4875aeb128a47440a1ef9bac19460f522d268d654c63de4ad93b7fd1bf/detection

http://185.147.124.116
/M0XmDru/clip.dll
/M0XmDru/cred.dll
/M0XmDru/clip64.dll
/M0XmDru/cred64.dll
/M0XmDru/Header.php
/M0XmDru/index.php
/M0XmDru/login.php
/M0XmDru/plugins/clip.dll
/M0XmDru/plugins/clip64.dll
/M0XmDru/plugins/cred.dll
/M0XmDru/plugins/cred64.dll
/M0XmDru/plugins/scr.dll
/M0XmDru/plugins/scr64.dll
/M0XmDru/scr.dll
/M0XmDru/scr64.dll

# Reference: https://www.virustotal.com/gui/file/0701becbee63ab67752774b2abff998744488f66f11a2d9e6d1f5da4feed11c0/detection

/Di0Her478/clip.dll
/Di0Her478/cred.dll
/Di0Her478/clip64.dll
/Di0Her478/cred64.dll
/Di0Her478/Header.php
/Di0Her478/index.php
/Di0Her478/login.php
/Di0Her478/plugins/clip.dll
/Di0Her478/plugins/clip64.dll
/Di0Her478/plugins/cred.dll
/Di0Her478/plugins/cred64.dll
/Di0Her478/plugins/scr.dll
/Di0Her478/plugins/scr64.dll
/Di0Her478/scr.dll
/Di0Her478/scr64.dll

# Reference: https://x.com/banthisguy9349/status/1916105701828550813

http://185.39.17.163
http://185.39.17.241
/0Bdh3sQpbD/clip.dll
/0Bdh3sQpbD/cred.dll
/0Bdh3sQpbD/clip64.dll
/0Bdh3sQpbD/cred64.dll
/0Bdh3sQpbD/Header.php
/0Bdh3sQpbD/index.php
/0Bdh3sQpbD/login.php
/0Bdh3sQpbD/plugins/clip.dll
/0Bdh3sQpbD/plugins/clip64.dll
/0Bdh3sQpbD/plugins/cred.dll
/0Bdh3sQpbD/plugins/cred64.dll
/0Bdh3sQpbD/plugins/scr.dll
/0Bdh3sQpbD/plugins/scr64.dll
/0Bdh3sQpbD/scr.dll
/0Bdh3sQpbD/scr64.dll
/Su8kud7i/clip.dll
/Su8kud7i/cred.dll
/Su8kud7i/clip64.dll
/Su8kud7i/cred64.dll
/Su8kud7i/Header.php
/Su8kud7i/index.php
/Su8kud7i/login.php
/Su8kud7i/plugins/clip.dll
/Su8kud7i/plugins/clip64.dll
/Su8kud7i/plugins/cred.dll
/Su8kud7i/plugins/cred64.dll
/Su8kud7i/plugins/scr.dll
/Su8kud7i/plugins/scr64.dll
/Su8kud7i/scr.dll
/Su8kud7i/scr64.dll

# Reference: https://www.virustotal.com/gui/file/01cc90cd8152479f6154db234c72065532da27dde6220a8c7f27ddf9a98f7fd0/detection

http://185.156.72.96
/te4h2nus/clip.dll
/te4h2nus/cred.dll
/te4h2nus/clip64.dll
/te4h2nus/cred64.dll
/te4h2nus/Header.php
/te4h2nus/index.php
/te4h2nus/login.php
/te4h2nus/plugins/clip.dll
/te4h2nus/plugins/clip64.dll
/te4h2nus/plugins/cred.dll
/te4h2nus/plugins/cred64.dll
/te4h2nus/plugins/scr.dll
/te4h2nus/plugins/scr64.dll
/te4h2nus/scr.dll
/te4h2nus/scr64.dll

# Reference: https://www.virustotal.com/gui/file/c7386fde4d6b42bc322682a7cb465122859d67804c2f51eeec0d581bfae110d5/detection

auntberry.xyz
rhvw63.top
servicetelemetryserver.shop
idi.rhvw63.top
241009225650385.idi.rhvw63.top

# Reference: https://www.virustotal.com/gui/file/f28faa7bec3413a179f5780f5f1b2b3c6c4da68446232fef82a13f9bb3247c11/detection
# Reference: https://www.virustotal.com/gui/file/8895cf493ab0fb0ad6e0352070935c757a3e3330b0f658202c9a9caf160c6d92/detection

31.59.185.129:9998
77.105.164.91:9998
lying0catto.ru

# Reference: https://x.com/skocherhan/status/1924554093801955706
# Reference: https://www.virustotal.com/gui/file/05f19517587d85bf5dad8d40a1df01a49a0e2081576a7c67f9e61cbd599e30cb/detection

http://77.83.207.69
/rob75u9v/clip.dll
/rob75u9v/cred.dll
/rob75u9v/clip64.dll
/rob75u9v/cred64.dll
/rob75u9v/Header.php
/rob75u9v/index.php
/rob75u9v/login.php
/rob75u9v/plugins/clip.dll
/rob75u9v/plugins/clip64.dll
/rob75u9v/plugins/cred.dll
/rob75u9v/plugins/cred64.dll
/rob75u9v/plugins/scr.dll
/rob75u9v/plugins/scr64.dll
/rob75u9v/scr.dll
/rob75u9v/scr64.dll

# Reference: https://www.virustotal.com/gui/file/0bcf66840ce892666f1b245bb63d6976135fbe39729f9063be627525ec7802fb/detection

http://185.125.50.8
st58250.ispot.cc
/mVsXkjvb3/clip.dll
/mVsXkjvb3/cred.dll
/mVsXkjvb3/clip64.dll
/mVsXkjvb3/cred64.dll
/mVsXkjvb3/Header.php
/mVsXkjvb3/index.php
/mVsXkjvb3/login.php
/mVsXkjvb3/plugins/clip.dll
/mVsXkjvb3/plugins/clip64.dll
/mVsXkjvb3/plugins/cred.dll
/mVsXkjvb3/plugins/cred64.dll
/mVsXkjvb3/plugins/scr.dll
/mVsXkjvb3/plugins/scr64.dll
/mVsXkjvb3/scr.dll
/mVsXkjvb3/scr64.dll

# Reference: https://www.virustotal.com/gui/file/ba8a54a8e59228600a0b9d8ae82b37ec43ee76bae638590d7f4b789914541c41/detection

cleaningenering.top
cleaningpro.top
procleaninger.top
/bEmVq2kW/clip.dll
/bEmVq2kW/cred.dll
/bEmVq2kW/clip64.dll
/bEmVq2kW/cred64.dll
/bEmVq2kW/Header.php
/bEmVq2kW/index.php
/bEmVq2kW/login.php
/bEmVq2kW/plugins/clip.dll
/bEmVq2kW/plugins/clip64.dll
/bEmVq2kW/plugins/cred.dll
/bEmVq2kW/plugins/cred64.dll
/bEmVq2kW/plugins/scr.dll
/bEmVq2kW/plugins/scr64.dll
/bEmVq2kW/scr.dll
/bEmVq2kW/scr64.dll

# Reference: https://x.com/ShanHolo/status/1927432356014494017
# Reference: https://www.virustotal.com/gui/file/41b1d1cd846ad2d038c7ff9f062aadaa2036e3c2202b7a57dce45b2a9e2fecee/detection

http://195.82.146.131
/HthsDb74/clip.dll
/HthsDb74/cred.dll
/HthsDb74/clip64.dll
/HthsDb74/cred64.dll
/HthsDb74/Header.php
/HthsDb74/index.php
/HthsDb74/login.php
/HthsDb74/plugins/clip.dll
/HthsDb74/plugins/clip64.dll
/HthsDb74/plugins/cred.dll
/HthsDb74/plugins/cred64.dll
/HthsDb74/plugins/scr.dll
/HthsDb74/plugins/scr64.dll
/HthsDb74/scr.dll
/HthsDb74/scr64.dll

# Reference: https://x.com/skocherhan/status/1929773114986025282

kantorpusatsbl.com

# Reference: https://www.virustotal.com/gui/file/0347a3751e4a892d3ac265d8b49ed9991540fc1170dd749bc4ddd97290082aa9/detection

http://31.43.185.30
/ku9f3ton/clip.dll
/ku9f3ton/cred.dll
/ku9f3ton/clip64.dll
/ku9f3ton/cred64.dll
/ku9f3ton/Header.php
/ku9f3ton/index.php
/ku9f3ton/login.php
/ku9f3ton/plugins/clip.dll
/ku9f3ton/plugins/clip64.dll
/ku9f3ton/plugins/cred.dll
/ku9f3ton/plugins/cred64.dll
/ku9f3ton/plugins/scr.dll
/ku9f3ton/plugins/scr64.dll
/ku9f3ton/scr.dll
/ku9f3ton/scr64.dll

# Reference: https://x.com/ShanHolo/status/1939613456325599493
# Reference: https://www.virustotal.com/gui/file/68144771c0353038f219bb4c17fff3909d794f2a948b188cfd2d6d34fd88a247/detection

http://185.156.72.61
http://95.179.176.51
/h0pg5u4k/clip.dll
/h0pg5u4k/cred.dll
/h0pg5u4k/clip64.dll
/h0pg5u4k/cred64.dll
/h0pg5u4k/Header.php
/h0pg5u4k/index.php
/h0pg5u4k/login.php
/h0pg5u4k/plugins/clip.dll
/h0pg5u4k/plugins/clip64.dll
/h0pg5u4k/plugins/cred.dll
/h0pg5u4k/plugins/cred64.dll
/h0pg5u4k/plugins/scr.dll
/h0pg5u4k/plugins/scr64.dll
/h0pg5u4k/scr.dll
/h0pg5u4k/scr64.dll

# Generic trails

/1dEr2nYffd/clip.dll
/1dEr2nYffd/cred.dll
/1dEr2nYffd/clip64.dll
/1dEr2nYffd/cred64.dll
/1dEr2nYffd/index.php
/1dEr2nYffd/login.php
/1dEr2nYffd/plugins/clip.dll
/1dEr2nYffd/plugins/clip64.dll
/1dEr2nYffd/plugins/cred.dll
/1dEr2nYffd/plugins/cred64.dll
/1dEr2nYffd/plugins/scr.dll
/1dEr2nYffd/plugins/scr64.dll
/1dEr2nYffd/scr.dll
/1dEr2nYffd/scr64.dll
/2hYbb4x/clip.dll
/2hYbb4x/cred.dll
/2hYbb4x/clip64.dll
/2hYbb4x/cred64.dll
/2hYbb4x/index.php
/2hYbb4x/login.php
/2hYbb4x/plugins/clip.dll
/2hYbb4x/plugins/clip64.dll
/2hYbb4x/plugins/cred.dll
/2hYbb4x/plugins/cred64.dll
/2hYbb4x/plugins/scr.dll
/2hYbb4x/plugins/scr64.dll
/2hYbb4x/scr.dll
/2hYbb4x/scr64.dll
/4dcYcWsw3/clip.dll
/4dcYcWsw3/clip64.dll
/4dcYcWsw3/cred.dll
/4dcYcWsw3/cred64.dll
/4dcYcWsw3/index.php
/4dcYcWsw3/login.php
/4dcYcWsw3/plugins/clip.dll
/4dcYcWsw3/plugins/clip64.dll
/4dcYcWsw3/plugins/cred.dll
/4dcYcWsw3/plugins/cred64.dll
/4dcYcWsw3/plugins/scr.dll
/4dcYcWsw3/plugins/scr64.dll
/4dcYcWsw3/scr.dll
/4dcYcWsw3/scr64.dll
/5Lsq3FR/clip.dll
/5Lsq3FR/clip64.dll
/5Lsq3FR/cred.dll
/5Lsq3FR/cred64.dll
/5Lsq3FR/src.dll
/5Lsq3FR/src64.dll
/5Lsq3FR/index.php
/5Lsq3FR/login.php
/5Lsq3FR/plugins/clip.dll
/5Lsq3FR/plugins/clip64.dll
/5Lsq3FR/plugins/cred.dll
/5Lsq3FR/plugins/cred64.dll
/5Lsq3FR/plugins/src.dll
/5Lsq3FR/plugins/src64.dll
/5vFgnRd4hdDbgS3H/clip.dll
/5vFgnRd4hdDbgS3H/clip64.dll
/5vFgnRd4hdDbgS3H/cred.dll
/5vFgnRd4hdDbgS3H/cred64.dll
/5vFgnRd4hdDbgS3H/index.php
/5vFgnRd4hdDbgS3H/login.php
/5vFgnRd4hdDbgS3H/plugins/clip.dll
/5vFgnRd4hdDbgS3H/plugins/clip64.dll
/5vFgnRd4hdDbgS3H/plugins/cred.dll
/5vFgnRd4hdDbgS3H/plugins/cred64.dll
/5vFgnRd4hdDbgS3H/plugins/scr.dll
/5vFgnRd4hdDbgS3H/plugins/scr64.dll
/5vFgnRd4hdDbgS3H/scr.dll
/5vFgnRd4hdDbgS3H/scr64.dll
/7Ndd3SnW/clip.dll
/7Ndd3SnW/clip64.dll
/7Ndd3SnW/cred.dll
/7Ndd3SnW/cred64.dll
/7Ndd3SnW/index.php
/7Ndd3SnW/login.php
/7Ndd3SnW/plugins/clip.dll
/7Ndd3SnW/plugins/clip64.dll
/7Ndd3SnW/plugins/cred.dll
/7Ndd3SnW/plugins/cred64.dll
/7Ndd3SnW/plugins/scr.dll
/7Ndd3SnW/plugins/scr64.dll
/7Ndd3SnW/scr.dll
/7Ndd3SnW/scr64.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/clip.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/clip64.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/cred.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/cred64.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/index.php
/8f74ede3-010d-4d83-834c-7f06e8d51100/login.php
/8f74ede3-010d-4d83-834c-7f06e8d51100/scr.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/scr64.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/clip.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/clip64.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/cred.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/cred64.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/index.php
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/login.php
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/scr.dll
/8f74ede3-010d-4d83-834c-7f06e8d51100/plugins/scr64.dll
/9bQlG42s/clip.dll
/9bQlG42s/clip64.dll
/9bQlG42s/cred.dll
/9bQlG42s/cred64.dll
/9bQlG42s/index.php
/9bQlG42s/login.php
/9bQlG42s/plugins/clip.dll
/9bQlG42s/plugins/clip64.dll
/9bQlG42s/plugins/cred.dll
/9bQlG42s/plugins/cred64.dll
/9bQlG42s/plugins/scr.dll
/9bQlG42s/plugins/scr64.dll
/9bQlG42s/scr.dll
/9bQlG42s/scr64.dll
/Amadey/clip.dll
/Amadey/clip64.dll
/Amadey/cred.dll
/Amadey/cred64.dll
/Amadey/index.php
/Amadey/login.php
/Amadey/scr.dll
/Amadey/scr64.dll
/Amadey/plugins/clip.dll
/Amadey/plugins/clip64.dll
/Amadey/plugins/cred.dll
/Amadey/plugins/cred64.dll
/Amadey/plugins/index.php
/Amadey/plugins/login.php
/Amadey/plugins/scr.dll
/Amadey/plugins/scr64.dll
/EASiAZpF/clip.dll
/EASiAZpF/clip64.dll
/EASiAZpF/cred.dll
/EASiAZpF/cred64.dll
/EASiAZpF/index.php
/EASiAZpF/login.php
/EASiAZpF/scr.dll
/EASiAZpF/scr64.dll
/EASiAZpF/plugins/clip.dll
/EASiAZpF/plugins/clip64.dll
/EASiAZpF/plugins/cred.dll
/EASiAZpF/plugins/cred64.dll
/EASiAZpF/plugins/index.php
/EASiAZpF/plugins/login.php
/EASiAZpF/plugins/scr.dll
/EASiAZpF/plugins/scr64.dll
/Gv93xs2Nz/clip.dll
/Gv93xs2Nz/clip64.dll
/Gv93xs2Nz/cred.dll
/Gv93xs2Nz/cred64.dll
/Gv93xs2Nz/index.php
/Gv93xs2Nz/login.php
/Gv93xs2Nz/plugins/clip.dll
/Gv93xs2Nz/plugins/clip64.dll
/Gv93xs2Nz/plugins/cred.dll
/Gv93xs2Nz/plugins/cred64.dll
/Gv93xs2Nz/plugins/scr.dll
/Gv93xs2Nz/plugins/scr64.dll
/Gv93xs2Nz/scr.dll
/Gv93xs2Nz/scr64.dll
/Hfunr3U/clip.dll
/Hfunr3U/clip64.dll
/Hfunr3U/cred.dll
/Hfunr3U/cred64.dll
/Hfunr3U/index.php
/Hfunr3U/login.php
/Hfunr3U/scr.dll
/Hfunr3U/scr64.dll
/Hfunr3U/plugins/clip.dll
/Hfunr3U/plugins/clip64.dll
/Hfunr3U/plugins/cred.dll
/Hfunr3U/plugins/cred64.dll
/Hfunr3U/plugins/index.php
/Hfunr3U/plugins/login.php
/Hfunr3U/plugins/scr.dll
/Hfunr3U/plugins/scr64.dll
/Hq13Vdsv2W/clip.dll
/Hq13Vdsv2W/clip64.dll
/Hq13Vdsv2W/cred.dll
/Hq13Vdsv2W/cred64.dll
/Hq13Vdsv2W/index.php
/Hq13Vdsv2W/login.php
/Hq13Vdsv2W/plugins/clip.dll
/Hq13Vdsv2W/plugins/clip64.dll
/Hq13Vdsv2W/plugins/cred.dll
/Hq13Vdsv2W/plugins/cred64.dll
/Hq13Vdsv2W/plugins/scr.dll
/Hq13Vdsv2W/plugins/scr64.dll
/Hq13Vdsv2W/scr.dll
/Hq13Vdsv2W/scr64.dll
/Kiru9gu/clip.dll
/Kiru9gu/cred.dll
/Kiru9gu/clip64.dll
/Kiru9gu/cred64.dll
/Kiru9gu/index.php
/Kiru9gu/login.php
/Kiru9gu/plugins/clip.dll
/Kiru9gu/plugins/clip64.dll
/Kiru9gu/plugins/cred.dll
/Kiru9gu/plugins/cred64.dll
/Kiru9gu/plugins/scr.dll
/Kiru9gu/plugins/scr64.dll
/Kiru9gu/scr.dll
/Kiru9gu/scr64.dll
/Lkb2dxj3/index.php
/Lkb2dxj3/login.php
/Lkb2dxj3/clip.dll
/Lkb2dxj3/clip64.dll
/Lkb2dxj3/cred.dll
/Lkb2dxj3/cred64.dll
/Lkb2dxj3/plugins/clip.dll
/Lkb2dxj3/plugins/clip64.dll
/Lkb2dxj3/plugins/cred.dll
/Lkb2dxj3/plugins/cred64.dll
/Lkb2dxj3/plugins/scr.dll
/Lkb2dxj3/plugins/scr64.dll
/Lkb2dxj3/scr.dll
/Lkb2dxj3/scr64.dll
/Qbv2ff03/clip.dll
/Qbv2ff03/clip64.dll
/Qbv2ff03/cred.dll
/Qbv2ff03/cred64.dll
/Qbv2ff03/index.php
/Qbv2ff03/login.php
/Qbv2ff03/plugins/clip.dll
/Qbv2ff03/plugins/clip64.dll
/Qbv2ff03/plugins/cred.dll
/Qbv2ff03/plugins/cred64.dll
/Qbv2ff03/plugins/scr.dll
/Qbv2ff03/plugins/scr64.dll
/Qbv2ff03/scr.dll
/Qbv2ff03/scr64.dll
/S0soiAI/clip.dll
/S0soiAI/clip64.dll
/S0soiAI/cred.dll
/S0soiAI/cred64.dll
/S0soiAI/index.php
/S0soiAI/login.php
/S0soiAI/scr.dll
/S0soiAI/scr64.dll
/S0soiAI/plugins/clip.dll
/S0soiAI/plugins/clip64.dll
/S0soiAI/plugins/cred.dll
/S0soiAI/plugins/cred64.dll
/S0soiAI/plugins/scr.dll
/S0soiAI/plugins/scr64.dll
/aW8bVds1/clip.dll
/aW8bVds1/clip64.dll
/aW8bVds1/cred.dll
/aW8bVds1/cred64.dll
/aW8bVds1/index.php
/aW8bVds1/login.php
/aW8bVds1/scr.dll
/aW8bVds1/scr64.dll
/aW8bVds1/plugins/clip.dll
/aW8bVds1/plugins/clip64.dll
/aW8bVds1/plugins/cred.dll
/aW8bVds1/plugins/cred64.dll
/aW8bVds1/plugins/scr.dll
/aW8bVds1/plugins/scr64.dll
/b2ccsaG/clip.dll
/b2ccsaG/clip64.dll
/b2ccsaG/cred.dll
/b2ccsaG/cred64.dll
/b2ccsaG/index.php
/b2ccsaG/login.php
/b2ccsaG/plugins/clip.dll
/b2ccsaG/plugins/clip64.dll
/b2ccsaG/plugins/cred.dll
/b2ccsaG/plugins/cred64.dll
/b2ccsaG/plugins/scr.dll
/b2ccsaG/plugins/scr64.dll
/b2ccsaG/scr.dll
/b2ccsaG/scr64.dll
/b2xPhbdW/clip.dll
/b2xPhbdW/clip64.dll
/b2xPhbdW/cred.dll
/b2xPhbdW/cred64.dll
/b2xPhbdW/index.php
/b2xPhbdW/login.php
/b2xPhbdW/scr.dll
/b2xPhbdW/scr64.dll
/b2xPhbdW/plugins/clip.dll
/b2xPhbdW/plugins/clip64.dll
/b2xPhbdW/plugins/cred.dll
/b2xPhbdW/plugins/cred64.dll
/b2xPhbdW/plugins/scr.dll
/b2xPhbdW/plugins/scr64.dll
/bHn4Df/clip.dll
/bHn4Df/clip64.dll
/bHn4Df/cred.dll
/bHn4Df/cred64.dll
/bHn4Df/index.php
/bHn4Df/login.php
/bHn4Df/scr.dll
/bHn4Df/scr64.dll
/bHn4Df/plugins/clip.dll
/bHn4Df/plugins/clip64.dll
/bHn4Df/plugins/cred.dll
/bHn4Df/plugins/cred64.dll
/bHn4Df/plugins/scr.dll
/bHn4Df/plugins/scr64.dll
/bNyg4dSX/clip.dll
/bNyg4dSX/clip64.dll
/bNyg4dSX/cred.dll
/bNyg4dSX/cred64.dll
/bNyg4dSX/index.php
/bNyg4dSX/login.php
/bNyg4dSX/scr.dll
/bNyg4dSX/scr64.dll
/bPwsAq2/cred64.dll
/bPwsAq2/plugins/clip.dll
/bPwsAq2/plugins/clip64.dll
/bPwsAq2/plugins/cred.dll
/bPwsAq2/plugins/cred64.dll
/bPwsAq2/plugins/scr.dll
/bPwsAq2/plugins/scr64.dll
/bPwsAq2/scr64.dll
/boomsun/clip.dll
/boomsun/clip64.dll
/boomsun/cred.dll
/boomsun/cred64.dll
/boomsun/index.php
/boomsun/login.php
/boomsun/scr.dll
/boomsun/scr64.dll
/boomsun/plugins/clip.dll
/boomsun/plugins/clip64.dll
/boomsun/plugins/cred.dll
/boomsun/plugins/cred64.dll
/boomsun/plugins/scr.dll
/boomsun/plugins/scr64.dll
/d2VxjasuwS/clip.dll
/d2VxjasuwS/clip64.dll
/d2VxjasuwS/cred.dll
/d2VxjasuwS/cred64.dll
/d2VxjasuwS/index.php
/d2VxjasuwS/login.php
/d2VxjasuwS/plugins/clip.dll
/d2VxjasuwS/plugins/clip64.dll
/d2VxjasuwS/plugins/cred.dll
/d2VxjasuwS/plugins/cred64.dll
/d2VxjasuwS/plugins/scr.dll
/d2VxjasuwS/plugins/scr64.dll
/d2VxjasuwS/scr.dll
/d2VxjasuwS/scr64.dll
/d83LwEis/clip.dll
/d83LwEis/clip64.dll
/d83LwEis/cred.dll
/d83LwEis/cred64.dll
/d83LwEis/index.php
/d83LwEis/login.php
/d83LwEis/plugins/clip.dll
/d83LwEis/plugins/clip64.dll
/d83LwEis/plugins/cred.dll
/d83LwEis/plugins/cred64.dll
/d83LwEis/plugins/scr.dll
/d83LwEis/plugins/scr64.dll
/d83LwEis/scr.dll
/d83LwEis/scr64.dll
/ekqb2Sa/clip.dll
/ekqb2Sa/clip64.dll
/ekqb2Sa/cred.dll
/ekqb2Sa/cred64.dll
/ekqb2Sa/index.php
/ekqb2Sa/login.php
/ekqb2Sa/scr.dll
/ekqb2Sa/scr64.dll
/ekqb2Sa/plugins/clip.dll
/ekqb2Sa/plugins/clip64.dll
/ekqb2Sa/plugins/cred.dll
/ekqb2Sa/plugins/cred64.dll
/ekqb2Sa/plugins/scr.dll
/ekqb2Sa/plugins/scr64.dll
/f25bn5Gf/clip.dll
/f25bn5Gf/clip64.dll
/f25bn5Gf/cred.dll
/f25bn5Gf/cred64.dll
/f25bn5Gf/index.php
/f25bn5Gf/login.php
/f25bn5Gf/scr.dll
/f25bn5Gf/scr64.dll
/f25bn5Gf/plugins/clip.dll
/f25bn5Gf/plugins/clip64.dll
/f25bn5Gf/plugins/cred.dll
/f25bn5Gf/plugins/cred64.dll
/f25bn5Gf/plugins/scr.dll
/f25bn5Gf/plugins/scr64.dll
/f5lkB/clip.dll
/f5lkB/clip64.dll
/f5lkB/cred.dll
/f5lkB/cred64.dll
/f5lkB/index.php
/f5lkB/login.php
/f5lkB/scr.dll
/f5lkB/scr64.dll
/f5lkB/plugins/clip.dll
/f5lkB/plugins/clip64.dll
/f5lkB/plugins/cred.dll
/f5lkB/plugins/cred64.dll
/f5lkB/plugins/scr.dll
/f5lkB/plugins/scr64.dll
/f83jd823S/clip.dll
/f83jd823S/clip64.dll
/f83jd823S/cred.dll
/f83jd823S/cred64.dll
/f83jd823S/index.php
/f83jd823S/login.php
/f83jd823S/plugins/clip.dll
/f83jd823S/plugins/clip64.dll
/f83jd823S/plugins/cred.dll
/f83jd823S/plugins/cred64.dll
/f83jd823S/plugins/scr.dll
/f83jd823S/plugins/scr64.dll
/f83jd823S/scr.dll
/f83jd823S/scr64.dll
/f84Nls2/clip.dll
/f84Nls2/clip64.dll
/f84Nls2/cred.dll
/f84Nls2/cred64.dll
/f84Nls2/scr.dll
/f84Nls2/scr64.dll
/f84Nls2/index.php
/f84Nls2/login.php
/f84Nls2/plugins/clip.dll
/f84Nls2/plugins/clip64.dll
/f84Nls2/plugins/cred.dll
/f84Nls2/plugins/cred64.dll
/f84Nls2/plugins/scr.dll
/f84Nls2/plugins/scr64.dll
/f8dfksdj3/clip.dll
/f8dfksdj3/clip64.dll
/f8dfksdj3/cred.dll
/f8dfksdj3/cred64.dll
/f8dfksdj3/index.php
/f8dfksdj3/login.php
/f8dfksdj3/plugins/clip.dll
/f8dfksdj3/plugins/clip64.dll
/f8dfksdj3/plugins/cred.dll
/f8dfksdj3/plugins/cred64.dll
/f8dfksdj3/plugins/src.dll
/f8dfksdj3/plugins/src64.dll
/f8dfksdj3/src.dll
/f8dfksdj3/src64.dll
/fT5G42s/clip.dll
/fT5G42s/clip64.dll
/fT5G42s/cred.dll
/fT5G42s/cred64.dll
/fT5G42s/index.php
/fT5G42s/login.php
/fT5G42s/plugins/clip.dll
/fT5G42s/plugins/clip64.dll
/fT5G42s/plugins/cred.dll
/fT5G42s/plugins/cred64.dll
/fT5G42s/plugins/scr.dll
/fT5G42s/plugins/scr64.dll
/fT5G42s/scr.dll
/fT5G42s/scr64.dll
/fkwdoXScn2/clip.dll
/fkwdoXScn2/clip64.dll
/fkwdoXScn2/cred.dll
/fkwdoXScn2/cred64.dll
/fkwdoXScn2/index.php
/fkwdoXScn2/login.php
/fkwdoXScn2/plugins/clip.dll
/fkwdoXScn2/plugins/clip64.dll
/fkwdoXScn2/plugins/cred.dll
/fkwdoXScn2/plugins/cred64.dll
/fkwdoXScn2/plugins/scr.dll
/fkwdoXScn2/plugins/scr64.dll
/fkwdoXScn2/scr.dll
/fkwdoXScn2/scr64.dll
/fsc3ssxaP/clip.dll
/fsc3ssxaP/clip64.dll
/fsc3ssxaP/cred.dll
/fsc3ssxaP/cred64.dll
/fsc3ssxaP/index.php
/fsc3ssxaP/login.php
/fsc3ssxaP/plugins/clip.dll
/fsc3ssxaP/plugins/clip64.dll
/fsc3ssxaP/plugins/cred.dll
/fsc3ssxaP/plugins/cred64.dll
/fsc3ssxaP/plugins/scr.dll
/fsc3ssxaP/plugins/scr64.dll
/fsc3ssxaP/scr.dll
/fsc3ssxaP/scr64.dll
/ft5yho/clip.dll
/ft5yho/clip64.dll
/ft5yho/cred.dll
/ft5yho/cred64.dll
/ft5yho/index.php
/ft5yho/login.php
/ft5yho/plugins/clip.dll
/ft5yho/plugins/clip64.dll
/ft5yho/plugins/cred.dll
/ft5yho/plugins/cred64.dll
/ft5yho/plugins/scr.dll
/ft5yho/plugins/scr64.dll
/ft5yho/scr.dll
/ft5yho/scr64.dll
/g3VbWkG4/clip.dll
/g3VbWkG4/clip64.dll
/g3VbWkG4/cred.dll
/g3VbWkG4/cred64.dll
/g3VbWkG4/index.php
/g3VbWkG4/login.php
/g3VbWkG4/scr.dll
/g3VbWkG4/scr64.dll
/g3VbWkG4/plugins/clip.dll
/g3VbWkG4/plugins/clip64.dll
/g3VbWkG4/plugins/cred.dll
/g3VbWkG4/plugins/cred64.dll
/g3VbWkG4/plugins/scr.dll
/g3VbWkG4/plugins/scr64.dll
/g3cpNes5s/clip.dll
/g3cpNes5s/clip64.dll
/g3cpNes5s/cred.dll
/g3cpNes5s/cred64.dll
/g3cpNes5s/index.php
/g3cpNes5s/login.php
/g3cpNes5s/plugins/clip.dll
/g3cpNes5s/plugins/clip64.dll
/g3cpNes5s/plugins/cred.dll
/g3cpNes5s/plugins/cred64.dll
/g3cpNes5s/plugins/scr.dll
/g3cpNes5s/plugins/scr64.dll
/g3cpNes5s/scr.dll
/g3cpNes5s/scr64.dll
/g4MbvE/clip.dll
/g4MbvE/clip64.dll
/g4MbvE/cred.dll
/g4MbvE/cred64.dll
/g4MbvE/index.php
/g4MbvE/login.php
/g4MbvE/plugins/clip.dll
/g4MbvE/plugins/clip64.dll
/g4MbvE/plugins/cred.dll
/g4MbvE/plugins/cred64.dll
/g4MbvE/plugins/scr.dll
/g4MbvE/plugins/scr64.dll
/g4MbvE/src.dll
/g4MbvE/src64.dll
/g5FcvUgw/cred.dll
/g5FcvUgw/cred64.dll
/g5FcvUgw/index.php
/g5FcvUgw/login.php
/g5FcvUgw/plugins/clip.dll
/g5FcvUgw/plugins/clip64.dll
/g5FcvUgw/plugins/cred.dll
/g5FcvUgw/plugins/cred64.dll
/g5FcvUgw/plugins/scr.dll
/g5FcvUgw/plugins/scr64.dll
/g5FcvUgw/scr.dll
/g5FcvUgw/scr64.dll
/g5tUY/clip.dll
/g5tUY/clip64.dll
/g5tUY/cred.dll
/g5tUY/cred64.dll
/g5tUY/index.php
/g5tUY/login.php
/g5tUY/scr.dll
/g5tUY/scr64.dll
/g5tUY/plugins/clip.dll
/g5tUY/plugins/clip64.dll
/g5tUY/plugins/cred.dll
/g5tUY/plugins/cred64.dll
/g5tUY/plugins/scr.dll
/g5tUY/plugins/scr64.dll
/g6yNcO8/clip.dll
/g6yNcO8/clip64.dll
/g6yNcO8/cred.dll
/g6yNcO8/cred64.dll
/g6yNcO8/index.php
/g6yNcO8/login.php
/g6yNcO8/plugins/clip.dll
/g6yNcO8/plugins/clip64.dll
/g6yNcO8/plugins/cred.dll
/g6yNcO8/plugins/cred64.dll
/g6yNcO8/plugins/scr.dll
/g6yNcO8/plugins/scr64.dll
/g6yNcO8/scr.dll
/g6yNcO8/scr64.dll
/g81hYYq/clip.dll
/g81hYYq/clip64.dll
/g81hYYq/cred.dll
/g81hYYq/cred64.dll
/g81hYYq/index.php
/g81hYYq/login.php
/g81hYYq/scr.dll
/g81hYYq/scr64.dll
/g81hYYq/plugins/clip.dll
/g81hYYq/plugins/clip64.dll
/g81hYYq/plugins/cred.dll
/g81hYYq/plugins/cred64.dll
/g81hYYq/plugins/scr.dll
/g81hYYq/plugins/scr64.dll
/g8fDx33Ndw5/clip.dll
/g8fDx33Ndw5/clip64.dll
/g8fDx33Ndw5/cred.dll
/g8fDx33Ndw5/cred64.dll
/g8fDx33Ndw5/index.php
/g8fDx33Ndw5/login.php
/g8fDx33Ndw5/plugins/clip.dll
/g8fDx33Ndw5/plugins/clip64.dll
/g8fDx33Ndw5/plugins/cred.dll
/g8fDx33Ndw5/plugins/cred64.dll
/g8fDx33Ndw5/plugins/src.dll
/g8fDx33Ndw5/plugins/src64.dll
/g8fDx33Ndw5/src.dll
/g8fDx33Ndw5/src64.dll
/gBvqLn4Dc/clip.dll
/gBvqLn4Dc/clip64.dll
/gBvqLn4Dc/cred.dll
/gBvqLn4Dc/cred64.dll
/gBvqLn4Dc/index.php
/gBvqLn4Dc/login.php
/gBvqLn4Dc/scr.dll
/gBvqLn4Dc/scr64.dll
/gBvqLn4Dc/plugins/clip.dll
/gBvqLn4Dc/plugins/clip64.dll
/gBvqLn4Dc/plugins/cred.dll
/gBvqLn4Dc/plugins/cred64.dll
/gBvqLn4Dc/plugins/scr.dll
/gBvqLn4Dc/plugins/scr64.dll
/gBvsce2/clip.dll
/gBvsce2/clip64.dll
/gBvsce2/cred.dll
/gBvsce2/cred64.dll
/gBvsce2/index.php
/gBvsce2/login.php
/gBvsce2/scr.dll
/gBvsce2/scr64.dll
/gBvsce2/plugins/clip.dll
/gBvsce2/plugins/clip64.dll
/gBvsce2/plugins/cred.dll
/gBvsce2/plugins/cred64.dll
/gBvsce2/plugins/scr.dll
/gBvsce2/plugins/scr64.dll
/gWmR5f2W/clip.dll
/gWmR5f2W/clip64.dll
/gWmR5f2W/cred.dll
/gWmR5f2W/cred64.dll
/gWmR5f2W/index.php
/gWmR5f2W/login.php
/gWmR5f2W/plugins/clip.dll
/gWmR5f2W/plugins/clip64.dll
/gWmR5f2W/plugins/cred.dll
/gWmR5f2W/plugins/cred64.dll
/gWmR5f2W/plugins/scr.dll
/gWmR5f2W/plugins/scr64.dll
/gWmR5f2W/scr.dll
/gWmR5f2W/scr64.dll
/gb2pnjsjcs/clip.dll
/gb2pnjsjcs/clip64.dll
/gb2pnjsjcs/cred.dll
/gb2pnjsjcs/cred64.dll
/gb2pnjsjcs/index.php
/gb2pnjsjcs/login.php
/gb2pnjsjcs/plugins/clip.dll
/gb2pnjsjcs/plugins/clip64.dll
/gb2pnjsjcs/plugins/cred.dll
/gb2pnjsjcs/plugins/cred64.dll
/gb2pnjsjcs/plugins/scr.dll
/gb2pnjsjcs/plugins/scr64.dll
/gb2pnjsjcs/scr.dll
/gb2pnjsjcs/scr64.dll
/gb9fskvS/clip.dll
/gb9fskvS/clip64.dll
/gb9fskvS/cred.dll
/gb9fskvS/cred64.dll
/gb9fskvS/index.php
/gb9fskvS/login.php
/gb9fskvS/plugins/clip.dll
/gb9fskvS/plugins/clip64.dll
/gb9fskvS/plugins/cred.dll
/gb9fskvS/plugins/cred64.dll
/gb9fskvS/plugins/src.dll
/gb9fskvS/plugins/src64.dll
/gb9fskvS/src.dll
/gb9fskvS/src64.dll
/gg4mn3s/clip.dll
/gg4mn3s/clip64.dll
/gg4mn3s/cred.dll
/gg4mn3s/cred64.dll
/gg4mn3s/index.php
/gg4mn3s/login.php
/gg4mn3s/plugins/clip.dll
/gg4mn3s/plugins/clip64.dll
/gg4mn3s/plugins/cred.dll
/gg4mn3s/plugins/cred64.dll
/gg4mn3s/plugins/src.dll
/gg4mn3s/plugins/src64.dll
/gg4mn3s/src.dll
/gg4mn3s/src64.dll
/gkkjs/clip.dll
/gkkjs/clip64.dll
/gkkjs/cred.dll
/gkkjs/cred64.dll
/gkkjs/index.php
/gkkjs/login.php
/gkkjs/scr.dll
/gkkjs/scr64.dll
/gkkjs/plugins/clip.dll
/gkkjs/plugins/clip64.dll
/gkkjs/plugins/cred.dll
/gkkjs/plugins/cred64.dll
/gkkjs/plugins/scr.dll
/gkkjs/plugins/scr64.dll
/hBF6ds2D/clip.dll
/hBF6ds2D/clip64.dll
/hBF6ds2D/cred.dll
/hBF6ds2D/cred64.dll
/hBF6ds2D/index.php
/hBF6ds2D/login.php
/hBF6ds2D/plugins/clip.dll
/hBF6ds2D/plugins/clip64.dll
/hBF6ds2D/plugins/cred.dll
/hBF6ds2D/plugins/cred64.dll
/hBF6ds2D/plugins/scr.dll
/hBF6ds2D/plugins/scr64.dll
/hBF6ds2D/scr.dll
/hBF6ds2D/scr64.dll
/hBfd4cX/clip.dll
/hBfd4cX/clip64.dll
/hBfd4cX/cred.dll
/hBfd4cX/cred64.dll
/hBfd4cX/index.php
/hBfd4cX/login.php
/hBfd4cX/scr.dll
/hBfd4cX/scr64.dll
/hBfd4cX/plugins/clip.dll
/hBfd4cX/plugins/clip64.dll
/hBfd4cX/plugins/cred.dll
/hBfd4cX/plugins/cred64.dll
/hBfd4cX/plugins/scr.dll
/hBfd4cX/plugins/scr64.dll
/hbke93dkdsS/clip.dll
/hbke93dkdsS/clip64.dll
/hbke93dkdsS/cred.dll
/hbke93dkdsS/cred64.dll
/hbke93dkdsS/index.php
/hbke93dkdsS/login.php
/hbke93dkdsS/plugins/clip.dll
/hbke93dkdsS/plugins/clip64.dll
/hbke93dkdsS/plugins/cred.dll
/hbke93dkdsS/plugins/cred64.dll
/hbke93dkdsS/plugins/scr.dll
/hbke93dkdsS/plugins/scr64.dll
/hbke93dkdsS/scr.dll
/hbke93dkdsS/scr64.dll
/hfv23svj2/clip.dll
/hfv23svj2/clip64.dll
/hfv23svj2/cred.dll
/hfv23svj2/cred64.dll
/hfv23svj2/index.php
/hfv23svj2/login.php
/hfv23svj2/plugins/clip.dll
/hfv23svj2/plugins/clip64.dll
/hfv23svj2/plugins/cred.dll
/hfv23svj2/plugins/cred64.dll
/hfv23svj2/plugins/scr.dll
/hfv23svj2/plugins/scr64.dll
/hfv23svj2/scr.dll
/hfv23svj2/scr64.dll
/hr4csxqlf/clip.dll
/hr4csxqlf/clip64.dll
/hr4csxqlf/cred.dll
/hr4csxqlf/cred64.dll
/hr4csxqlf/index.php
/hr4csxqlf/login.php
/hr4csxqlf/plugins/clip.dll
/hr4csxqlf/plugins/clip64.dll
/hr4csxqlf/plugins/cred.dll
/hr4csxqlf/plugins/cred64.dll
/hr4csxqlf/plugins/scr.dll
/hr4csxqlf/plugins/scr64.dll
/hr4csxqlf/scr.dll
/hr4csxqlf/scr64.dll
/hx33jnDw/clip.dll
/hx33jnDw/clip64.dll
/hx33jnDw/cred.dll
/hx33jnDw/cred64.dll
/hx33jnDw/index.php
/hx33jnDw/login.php
/hx33jnDw/plugins/clip.dll
/hx33jnDw/plugins/clip64.dll
/hx33jnDw/plugins/cred.dll
/hx33jnDw/plugins/cred64.dll
/hx33jnDw/plugins/scr.dll
/hx33jnDw/plugins/scr64.dll
/hx33jnDw/scr.dll
/hx33jnDw/scr64.dll
/i7Gsce2Nd/clip.dll
/i7Gsce2Nd/clip64.dll
/i7Gsce2Nd/cred.dll
/i7Gsce2Nd/cred64.dll
/i7Gsce2Nd/index.php
/i7Gsce2Nd/login.php
/i7Gsce2Nd/plugins/clip.dll
/i7Gsce2Nd/plugins/clip64.dll
/i7Gsce2Nd/plugins/cred.dll
/i7Gsce2Nd/plugins/cred64.dll
/i7Gsce2Nd/plugins/scr.dll
/i7Gsce2Nd/plugins/scr64.dll
/i7Gsce2Nd/scr.dll
/i7Gsce2Nd/scr64.dll
/iKns2W/clip.dll
/iKns2W/clip64.dll
/iKns2W/cred.dll
/iKns2W/cred64.dll
/iKns2W/index.php
/iKns2W/login.php
/iKns2W/scr.dll
/iKns2W/scr64.dll
/iKns2W/plugins/clip.dll
/iKns2W/plugins/clip64.dll
/iKns2W/plugins/cred.dll
/iKns2W/plugins/cred64.dll
/iKns2W/plugins/scr.dll
/iKns2W/plugins/scr64.dll
/j88hNjkMn/clip.dll
/j88hNjkMn/clip64.dll
/j88hNjkMn/cred.dll
/j88hNjkMn/cred64.dll
/j88hNjkMn/index.php
/j88hNjkMn/login.php
/j88hNjkMn/scr.dll
/j88hNjkMn/scr64.dll
/j88hNjkMn/plugins/clip.dll
/j88hNjkMn/plugins/clip64.dll
/j88hNjkMn/plugins/cred.dll
/j88hNjkMn/plugins/cred64.dll
/j88hNjkMn/plugins/scr.dll
/j88hNjkMn/plugins/scr64.dll
/jG3cs2rP/clip.dll
/jG3cs2rP/crlip64.dll
/jG3cs2rP/cred.dll
/jG3cs2rP/cred64.dll
/jG3cs2rP/index.php
/jG3cs2rP/login.php
/jG3cs2rP/plugins/clip.dll
/jG3cs2rP/plugins/clip64.dll
/jG3cs2rP/plugins/cred.dll
/jG3cs2rP/plugins/cred64.dll
/jG3cs2rP/plugins/scr.dll
/jG3cs2rP/plugins/scr64.dll
/jG3cs2rP/scr.dll
/jG3cs2rP/scr64.dll
/k0uTrd3d/clip.dll
/k0uTrd3d/clip64.dll
/k0uTrd3d/cred.dll
/k0uTrd3d/cred64.dll
/k0uTrd3d/index.php
/k0uTrd3d/login.php
/k0uTrd3d/plugins/clip.dll
/k0uTrd3d/plugins/clip64.dll
/k0uTrd3d/plugins/scr.dll
/k0uTrd3d/plugins/scr64.dll
/k0uTrd3d/plugins/cred.dll
/k0uTrd3d/plugins/cred64.dll
/k0uTrd3d/plugins/scr.dll
/k0uTrd3d/plugins/scr64.dll
/k0uTrd3d/scr.dll
/k0uTrd3d/scr64.dll
/mB5gDsv/clip.dll
/mB5gDsv/clip64.dll
/mB5gDsv/cred.dll
/mB5gDsv/cred64.dll
/mB5gDsv/index.php
/mB5gDsv/login.php
/mB5gDsv/plugins/clip.dll
/mB5gDsv/plugins/clip64.dll
/mB5gDsv/plugins/cred.dll
/mB5gDsv/plugins/cred64.dll
/mB5gDsv/plugins/scr.dll
/mB5gDsv/plugins/scr64.dll
/mB5gDsv/scr.dll
/mB5gDsv/scr64.dll
/mBSqq12/clip.dll
/mBSqq12/clip64.dll
/mBSqq12/cred.dll
/mBSqq12/cred64.dll
/mBSqq12/index.php
/mBSqq12/login.php
/mBSqq12/scr.dll
/mBSqq12/scr64.dll
/mBSqq12/plugins/clip.dll
/mBSqq12/plugins/clip64.dll
/mBSqq12/plugins/cred.dll
/mBSqq12/plugins/cred64.dll
/mBSqq12/plugins/scr.dll
/mBSqq12/plugins/scr64.dll
/mBvqpgE3/clip.dll
/mBvqpgE3/clip64.dll
/mBvqpgE3/cred.dll
/mBvqpgE3/cred64.dll
/mBvqpgE3/index.php
/mBvqpgE3/login.php
/mBvqpgE3/scr.dll
/mBvqpgE3/scr64.dll
/mBvqpgE3/plugins/clip.dll
/mBvqpgE3/plugins/clip64.dll
/mBvqpgE3/plugins/cred.dll
/mBvqpgE3/plugins/cred64.dll
/mBvqpgE3/plugins/scr.dll
/mBvqpgE3/plugins/scr64.dll
/madapam/clip.dll
/madapam/clip64.dll
/madapam/cred.dll
/madapam/cred64.dll
/madapam/index.php
/madapam/login.php
/madapam/scr.dll
/madapam/scr64.dll
/madapam/plugins/clip.dll
/madapam/plugins/clip64.dll
/madapam/plugins/cred.dll
/madapam/plugins/cred64.dll
/madapam/plugins/scr.dll
/madapam/plugins/scr64.dll
/mdc1io87ds/clip.dll
/mdc1io87ds/clip64.dll
/mdc1io87ds/cred.dll
/mdc1io87ds/cred64.dll
/mdc1io87ds/index.php
/mdc1io87ds/login.php
/mdc1io87ds/scr.dll
/mdc1io87ds/scr64.dll
/mdc1io87ds/plugins/clip.dll
/mdc1io87ds/plugins/clip64.dll
/mdc1io87ds/plugins/cred.dll
/mdc1io87ds/plugins/cred64.dll
/mdc1io87ds/plugins/scr.dll
/mdc1io87ds/plugins/scr64.dll
/newCC/clip.dll
/newCC/clip64.dll
/newCC/cred.dll
/newCC/cred64.dll
/newCC/index.php
/newCC/login.php
/newCC/scr.dll
/newCC/scr64.dll
/newCC/plugins/clip.dll
/newCC/plugins/clip64.dll
/newCC/plugins/cred.dll
/newCC/plugins/cred64.dll
/newCC/plugins/scr.dll
/newCC/plugins/scr64.dll
/ni5TgT/clip.dll
/ni5TgT/clip64.dll
/ni5TgT/cred.dll
/ni5TgT/cred64.dll
/ni5TgT/scr.dll
/ni5TgT/scr64.dll
/ni5TgT/index.php
/ni5TgT/login.php
/ni5TgT/plugins/clip.dll
/ni5TgT/plugins/clip64.dll
/ni5TgT/plugins/cred.dll
/ni5TgT/plugins/cred64.dll
/ni5TgT/plugins/scr.dll
/ni5TgT/plugins/scr64.dll
/oDpbwa3dS/clip.dll
/oDpbwa3dS/clip64.dll
/oDpbwa3dS/cred.dll
/oDpbwa3dS/cred64.dll
/oDpbwa3dS/index.php
/oDpbwa3dS/login.php
/oDpbwa3dS/plugins/clip.dll
/oDpbwa3dS/plugins/clip64.dll
/oDpbwa3dS/plugins/cred.dll
/oDpbwa3dS/plugins/cred64.dll
/oDpbwa3dS/plugins/scr.dll
/oDpbwa3dS/plugins/scr64.dll
/oDpbwa3dS/scr.dll
/oDpbwa3dS/scr64.dll
/pZ4CkbjsO5/clip.dll
/pZ4CkbjsO5/clip64.dll
/pZ4CkbjsO5/cred.dll
/pZ4CkbjsO5/cred64.dll
/pZ4CkbjsO5/index.php
/pZ4CkbjsO5/login.php
/pZ4CkbjsO5/plugins/clip.dll
/pZ4CkbjsO5/plugins/clip64.dll
/pZ4CkbjsO5/plugins/cred.dll
/pZ4CkbjsO5/plugins/cred64.dll
/pZ4CkbjsO5/plugins/scr.dll
/pZ4CkbjsO5/plugins/scr64.dll
/pZ4CkbjsO5/scr.dll
/pZ4CkbjsO5/scr64.dll
/rkv4Pqi/clip.dll
/rkv4Pqi/clip64.dll
/rkv4Pqi/cred.dll
/rkv4Pqi/cred64.dll
/rkv4Pqi/index.php
/rkv4Pqi/login.php
/rkv4Pqi/plugins/clip.dll
/rkv4Pqi/plugins/clip64.dll
/rkv4Pqi/plugins/cred.dll
/rkv4Pqi/plugins/cred64.dll
/rkv4Pqi/plugins/src.dll
/rkv4Pqi/plugins/src64.dll
/rkv4Pqi/src.dll
/rkv4Pqi/src64.dll
/t1QccbN2/clip.dll
/t1QccbN2/clip64.dll
/t1QccbN2/cred.dll
/t1QccbN2/cred64.dll
/t1QccbN2/index.php
/t1QccbN2/login.php
/t1QccbN2/scr.dll
/t1QccbN2/scr64.dll
/t1QccbN2/plugins/clip.dll
/t1QccbN2/plugins/clip64.dll
/t1QccbN2/plugins/cred.dll
/t1QccbN2/plugins/cred64.dll
/t1QccbN2/plugins/scr.dll
/t1QccbN2/plugins/scr64.dll
/t5BnOoke2/clip.dll
/t5BnOoke2/clip64.dll
/t5BnOoke2/cred.dll
/t5BnOoke2/cred64.dll
/t5BnOoke2/index.php
/t5BnOoke2/login.php
/t5BnOoke2/plugins/clip.dll
/t5BnOoke2/plugins/clip64.dll
/t5BnOoke2/plugins/cred.dll
/t5BnOoke2/plugins/cred64.dll
/t5BnOoke2/plugins/scr.dll
/t5BnOoke2/plugins/scr64.dll
/t5BnOoke2/scr.dll
/t5BnOoke2/scr64.dll
/t7BnLkqwitOp52/clip.dll
/t7BnLkqwitOp52/clip64.dll
/t7BnLkqwitOp52/cred.dll
/t7BnLkqwitOp52/cred64.dll
/t7BnLkqwitOp52/index.php
/t7BnLkqwitOp52/login.php
/t7BnLkqwitOp52/scr.dll
/t7BnLkqwitOp52/scr64.dll
/t7BnLkqwitOp52/plugins/clip.dll
/t7BnLkqwitOp52/plugins/clip64.dll
/t7BnLkqwitOp52/plugins/cred.dll
/t7BnLkqwitOp52/plugins/cred64.dll
/t7BnLkqwitOp52/plugins/scr.dll
/t7BnLkqwitOp52/plugins/scr64.dll
/theCC/clip.dll
/theCC/clip64.dll
/theCC/cred.dll
/theCC/cred64.dll
/theCC/index.php
/theCC/login.php
/theCC/scr.dll
/theCC/scr64.dll
/theCC/plugins/clip.dll
/theCC/plugins/clip64.dll
/theCC/plugins/cred.dll
/theCC/plugins/cred64.dll
/theCC/plugins/scr.dll
/theCC/plugins/scr64.dll
/theCCnew/clip.dll
/theCCnew/clip64.dll
/theCCnew/cred.dll
/theCCnew/cred64.dll
/theCCnew/index.php
/theCCnew/login.php
/theCCnew/scr.dll
/theCCnew/scr64.dll
/theCCnew/plugins/clip.dll
/theCCnew/plugins/clip64.dll
/theCCnew/plugins/cred.dll
/theCCnew/plugins/cred64.dll
/theCCnew/plugins/scr.dll
/theCCnew/plugins/scr64.dll
/v4fDskvjsE/clip.dll
/v4fDskvjsE/clip64.dll
/v4fDskvjsE/cred.dll
/v4fDskvjsE/cred64.dll
/v4fDskvjsE/index.php
/v4fDskvjsE/login.php
/v4fDskvjsE/scr.dll
/v4fDskvjsE/scr64.dll
/v4fDskvjsE/plugins/clip.dll
/v4fDskvjsE/plugins/clip64.dll
/v4fDskvjsE/plugins/cred.dll
/v4fDskvjsE/plugins/cred64.dll
/v4fDskvjsE/plugins/scr.dll
/v4fDskvjsE/plugins/scr64.dll
/v7Dz2mmG/clip.dll
/v7Dz2mmG/clip64.dll
/v7Dz2mmG/cred.dll
/v7Dz2mmG/cred64.dll
/v7Dz2mmG/index.php
/v7Dz2mmG/login.php
/v7Dz2mmG/plugins/clip.dll
/v7Dz2mmG/plugins/clip64.dll
/v7Dz2mmG/plugins/cred.dll
/v7Dz2mmG/plugins/cred64.dll
/v7Dz2mmG/plugins/src.dll
/v7Dz2mmG/src.dll
/v7Dz2mmG/src64.dll
/vCsxpG/clip.dll
/vCsxpG/clip64.dll
/vCsxpG/cred.dll
/vCsxpG/cred64.dll
/vCsxpG/index.php
/vCsxpG/login.php
/vCsxpG/scr.dll
/vCsxpG/scr64.dll
/vCsxpG/plugins/clip.dll
/vCsxpG/plugins/clip64.dll
/vCsxpG/plugins/cred.dll
/vCsxpG/plugins/cred64.dll
/vCsxpG/plugins/scr.dll
/vCsxpG/plugins/scr64.dll
/xC0m3/clip.dll
/xC0m3/clip64.dll
/xC0m3/cred.dll
/xC0m3/cred64.dll
/xC0m3/index.php
/xC0m3/login.php
/xC0m3/plugins/clip.dll
/xC0m3/plugins/clip64.dll
/xC0m3/plugins/cred.dll
/xC0m3/plugins/cred64.dll
/xC0m3/plugins/scr.dll
/xC0m3/plugins/scr64.dll
/xC0m3/scr.dll
/xC0m3/scr64.dll
/yandex/Plugins/clip.dll
/yandex/Plugins/clip64.dll
/yandex/Plugins/cred.dll
/yandex/Plugins/cred64.dll
/yandex/Plugins/scr.dll
/yandex/Plugins/scr64.dll
/plugins/clip.dll
/plugins/clip64.dll
/plugins/cred.dll
/plugins/cred64.dll
/plugins/scr.dll
/plugins/scr64.dll