String found in binary or memory: i.lencr.or g/0

String found in binary or memory: l.pizzasca m String found in binary or memory: Qyd.com String found in binary or memory: GFrOKp2L0. String found in binary or memory: dl.windows /msdownloa d/update/v 3/static/t rustedr/en /authroots tl.cabw String found in binary or memory: dl.windows /msdownloa d/update/v 3/static/t rustedr/en /authroots tl.cab String found in binary or memory: dl.windows /msdownloa d/update/v 3/static/t rustedr/en String found in binary or memory: Dns.comDyn DNS UDP traffic detected without corresponding DNS query: 1.1.1.1 Network traffic detected: HTTP traff ic on port 443 -> 49 745Ĭonnects to IPs without corresponding DNS lookups Network traffic detected: HTTP traff ic on port 443 -> 49 746 Network traffic detected: HTTP traff ic on port 49745 -> 443 Network traffic detected: HTTP traff ic on port 49746 -> 443 HTTP traffic detected: GET /docs/ securesc/h a0ro937gcu c7l7deffks ulhg5h7mbp 1/i8n9cre9 1odm5qc7eb 8bae7nme47 6emf/16345 58175000/1 1595216098 898371304/ */15S7hmcC Z0F8RjTBHF 3nJl50DnT2 IzBg3?e=do wnload HTT P/1.1User- Agent: Moz illa/5.0 ( Windows NT 6.1 WOW6 4 Trident /7.0 rv:1 1.0) like GeckoCache -Control: no-cacheHo st: doc-0c -as-docs.g oogleuserc Connection : Keep-Ali veĭetected TCP or UDP traffic on non-standard ports 0 (Window s NT 6.1 WOW64 Tri dent/7.0 rv:11.0) l ike GeckoH ost: drive. HTTP traffic detected: GET /uc?ex port=downl oad&id=15S 7hmcCZ0F8R jTBHF3nJl5 0DnT2IzBg3 HTTP/1.1U ser-Agent: Mozilla/5. Uses a known web browser user agent for HTTP communication IP address seen in connection with other malware JA3 SSL client fingerprint seen in connection with other malware

Internet Provider seen in connection with other malware

Filezilla mac ufrc