Windows Analysis Report
7fqr9q4hAP.exe

Overview

General Information

Sample name:	7fqr9q4hAP.exe renamed because original name is a hash value
Original sample name:	35e366b9b046cd129968306cf0ffb92f213149a12d48a2e782fd0e25dba28462.exe
Analysis ID:	1532615
MD5:	8d775d8bedf3ae799cc244cc1e1c9df5
SHA1:	078a7c8dcbdda58a4158a6936835341b24437187
SHA256:	35e366b9b046cd129968306cf0ffb92f213149a12d48a2e782fd0e25dba28462
Tags:	exeuser-Chainskilabs
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for domain / URL

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Classification

Signatures

AV Detection

Multi AV Scanner detection for domain / URL

Source: jjjjjjjj.click	Virustotal: Detection: 5%	Perma Link
Source: mybackuplinks.com	Virustotal: Detection: 11%	Perma Link
Source: https://jjjjjjjj.click/jjjj/notepad.exe	Virustotal: Detection: 9%	Perma Link

Source: 7fqr9q4hAP.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: jjjjjjjj.click
Source: global traffic	DNS traffic detected: DNS query: mybackuplinks.com

Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://code.google.com/p/closure-compiler/wiki/SourceMaps
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.certigna.fr/certignarootca.crl01
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795617132.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799145146.000001BD230D7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797031859.000001BD230D1000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798181835.000001BD21696000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797766044.000001BD21695000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODOCertificationAuthority.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.dhimyotis.com/certignarootca.crl
Source: 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD21771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.dhimyotis.com/certignarootca.crlt
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1794783312.000001BD23088000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD23090000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD23088000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796956866.000001BD23093000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797098841.000001BD230A2000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799035993.000001BD230A3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797076114.000001BD2309E000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797374452.000001BD230A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000002.1798257284.000001BD216AA000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795572171.000001BD216A9000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.netsolssl.com/NetworkSolutionsCertificateAuthority.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.netsolssl.com/NetworkSolutionsCertificateAuthority.crlzJp
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/SGCA.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/SGCA.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/SGCA.crlyncaughtE
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/STCA.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/STCA.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.xrampsecurity.com/XGCA.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795617132.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799145146.000001BD230D7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797031859.000001BD230D1000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.xrampsecurity.com/XGCA.crl0
Source: 7fqr9q4hAP.exe	String found in binary or memory: http://narwhaljs.org)
Source: 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.accv.es
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.accv.es0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.com
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.com(
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.comzJp
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.swisssign.com/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://src.chromium.org/viewvc/blink/trunk/Source/devtools/front_end/SourceMap.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://userguide.icu-project.org/strings/properties
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.3waylabs.com/nw/WWW/products/wizcon/vt220.html
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl;
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/legislacion_c.htm
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/legislacion_c.htm0U
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/legislacion_c.htm=
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es00
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.cert.fnmt.es/dpcs/
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217A7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798607726.000001BD217CA000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794274255.000001BD217A7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217A7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217C3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD217C7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217C4000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795714926.000001BD217C7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.firmaprofesional.com/cps0
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.midnight-commander.org/browser/lib/tty/key.c
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadis.bm
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadis.bm0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cps
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cps0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cpsSG
Source: 7fqr9q4hAP.exe	String found in binary or memory: http://www.squid-cache.org/Doc/config/half_closed_clients/
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10201
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10704
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=6593
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=745678
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=25916
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#clear
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://console.spec.whatwg.org/#console-namespace
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#count
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#count-map
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#countreset
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#table
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://crbug.com/v8/7848
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://cs.chromium.org/chromium/src/v8/tools/SourceMap.js?rcl=dd10454c1d
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/SpiderMonkey/Parser_API
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Equality_comparisons_and_sameness#Loose_equa
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://encoding.spec.whatwg.org
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://encoding.spec.whatwg.org/#textdecoder
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://encoding.spec.whatwg.org/#textencoder
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://esdiscuss.org/topic/isconstructor#content-11
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://gist.github.com/XVilka/8346728#gistcomment-2823421
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/acornjs/acorn/blob/master/acorn/src/identifier.js#L23
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/acornjs/acorn/issues/575
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/antirez/linenoise
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/chalk/ansi-regex/blob/master/index.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/chalk/supports-color
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/da-x/rxvt-unicode/tree/v9.22-with-24bit-color
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/estree/estree/blob/a27003adf4fd7bfad44de9cef372a2eacd527b1c/es5.md#regexpliteral
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/google/caja/blob/master/src/com/google/caja/ses/repairES5.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/google/caja/blob/master/src/com/google/caja/ses/startSES.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/wiki/Source-Maps
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/isaacs/color-support.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/joyent/node/issues/3295.
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/libuv/libuv/pull/1501.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/mafintosh/end-of-stream
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/mafintosh/pump
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/mysticatea/abort-controller
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node-v0.x-archive/issues/2876.
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792781831.00000016DF980000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1778339305.000001BD21813000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1791210785.000003BCBBB00000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1790568181.0000005482200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/blob/1a96d83a223ff9f05f7d942fb84440d323f7b596/lib/internal/bootstrap/
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/commit/ec2822adaad76b126b5cccdeaa1addf2376c9aa6
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/commit/f7620fb96d339f704932f9bb9a0dceb9952df2d4
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/10673
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/issues/13435
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/issues/19009
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/2006
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/2119
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/32020
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/3392
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/35475
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/35981
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/12342
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/12607
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/13870#discussion_r124515293
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/1771#issuecomment-119351671
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/21313
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/26334.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/30380#issuecomment-552948364
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/30958
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792781831.00000016DF980000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1778339305.000001BD21813000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1791210785.000003BCBBB00000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787592776.000001BD21821000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1790568181.0000005482200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33229
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33661
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/3394
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/34010
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/34103#issuecomment-652002364
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/34375
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/35949#issuecomment-722496598
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/standard-things/esm/issues/821.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/tc39/ecma262/issues/1209
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/tc39/proposal-ses/blob/e5271cc42a257a05dcae2fd94713ed2f46c08620/shim/src/freeze.j
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/v8/v8/blob/d6ead37d265d7215cf9c5f768f279e21bd170212/src/js/prologue.js#L152-L156
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://goo.gl/t5IS6M).
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://heycam.github.io/webidl/#define-the-operations
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-class-string
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-default-iterator-object
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-iterator-prototype-object
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://heycam.github.io/webidl/#es-interfaces
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterable
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterable-entries
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterators
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://heycam.github.io/webidl/#es-namespaces
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-operations
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-stringifier
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://html.spec.whatwg.org/multipage/webappapis.html#windoworworkerglobalscope
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://invisible-island.net/ncurses/terminfo.ti.html#toc-_Specials
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://invisible-island.net/xterm/ctlseqs/ctlseqs.html
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792614653.000001169E5C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://jjjjjjjj.click/jjjj/notepad.exe
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://linux.die.net/man/1/dircolors).
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://mathiasbynens.be/notes/javascript-encoding
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792252629.000000A54EA40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://mybackuplinks.com/PO.exe
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://no-color.org/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://nodejs.org/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://nodejs.org/api/cli.html#cli_unhandled_rejections_mode).
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791324044.000000ECCC100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/api/fs.html
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798238043.000001BD2169E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0-headers.tar.gz
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797647656.000001BD2169C000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798238043.000001BD2169E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0.tar.gz
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0.tar.gzI
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0.tar.gzhttps://nodejs.org/download/release
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798238043.000001BD2169E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/win-x64/node.lib
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.com
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.com0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.comiab.)
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://sourcemaps.info/spec.html
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://stackoverflow.com/a/5501711/3561
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%typedarray%.of
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.prototype.tostring
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc2397#section-2
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc3492#section-3.4
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://tools.ietf.org/html/rfc3986#section-3.2.2
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2.2
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2.6
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7540#section-8.1.2.5
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#cannot-have-a-username-password-port
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-url
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-url-origin
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-byte-serializer
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-parser
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-serializer
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#special-scheme
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://url.spec.whatwg.org/#url
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://url.spec.whatwg.org/#urlsearchparams
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#urlsearchparams-stringification-behavior
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://v8.dev/blog/v8-release-89
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://w3c.github.io/webappsec-subresource-integrity/#the-integrity-attribute
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://wiki.squid-cache.org/SquidFaq/InnerWorkings#What_is_a_half-closed_filedescriptor.3F
Source: 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.catcert.net/verarrel
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD2176B000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD2176B000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.catcert.net/verarrel05
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-line-terminators
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-promise.all
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-timeclip
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/5.1/#sec-15.1.3.4
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Alternative
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Atom
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClass
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClassEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtom
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtomNoDash
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassRanges
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlLetter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalDigits
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Disjunction
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Hex4Digits
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigit
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigits
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexEscapeSequence
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRanges
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRangesNoDash
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-OctalDigit
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Pattern
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-PatternCharacter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Quantifier
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-QuantifierPrefix
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-RegExpUnicodeEscapeSequence
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-SyntaxCharacter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Assertion
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-AtomEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-CharacterEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassControlLetter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedAtom
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedPatternCharacter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-IdentityEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-InvalidBracedQuantifier
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-LegacyOctalEscapeSequence
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Term
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-atomescape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-term
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://www.iana.org/assignments/tls-extensiontype-values
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.unicode.org/Public/UNIDATA/EastAsianWidth.txt
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wwww.certigna.fr/autorites/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD21771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wwww.certigna.fr/autorites/0m

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443

Sample file is different than original file name gathered from version info

Source: 7fqr9q4hAP.exe, 00000000.00000002.1801693394.00007FF7E2A7D000.00000002.00000001.01000000.00000003.sdmp

Binary or memory string: OriginalFilenamenode.exe* vs 7fqr9q4hAP.exe

Source: classification engine

Classification label: mal48.winEXE@2/0@2/2

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6568:120:WilError_03

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

File created: C:\Users\user\AppData\Local\Temp\pkg-B5fZlb

Jump to behavior

Source: 7fqr9q4hAP.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 7fqr9q4hAP.exe	String found in binary or memory: // lib/internal/modules/cjs/loader.js (CommonJS Modules) or
Source: 7fqr9q4hAP.exe	String found in binary or memory: // require('internal/bootstrap/loaders') even when this file is not written in
Source: 7fqr9q4hAP.exe	String found in binary or memory: const loaderId = 'internal/bootstrap/loaders';
Source: 7fqr9q4hAP.exe	String found in binary or memory: // - `lib/internal/bootstrap/loaders.js`: to setup internal binding and
Source: 7fqr9q4hAP.exe	String found in binary or memory: const CJSLoader = require('internal/modules/cjs/loader');
Source: 7fqr9q4hAP.exe	String found in binary or memory: require('internal/bootstrap/loaders').NativeModule.exposeInternals();
Source: 7fqr9q4hAP.exe	String found in binary or memory: const { NativeModule } = require('internal/bootstrap/loaders');
Source: 7fqr9q4hAP.exe	String found in binary or memory: } = require('internal/modules/cjs/loader');
Source: 7fqr9q4hAP.exe	String found in binary or memory: const { NativeModule } = require('internal/bootstrap/loaders');
Source: 7fqr9q4hAP.exe	String found in binary or memory: // Mark this socket as available, AFTER user-added end
Source: 7fqr9q4hAP.exe	String found in binary or memory: const { Module } = require('internal/modules/cjs/loader');

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

File read: C:\Users\user\Desktop\7fqr9q4hAP.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\7fqr9q4hAP.exe "C:\Users\user\Desktop\7fqr9q4hAP.exe"
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: fwpuclnt.dll	Jump to behavior

Source: 7fqr9q4hAP.exe

Static PE information: More than 8191 > 100 exports found

Source: 7fqr9q4hAP.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: 7fqr9q4hAP.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: 7fqr9q4hAP.exe

Static file information: File size 31085686 > 1048576

Source: 7fqr9q4hAP.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x102ae00
Source: 7fqr9q4hAP.exe	Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0xc3f400

Source: 7fqr9q4hAP.exe

Static PE information: More than 200 imports for KERNEL32.dll

Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: 7fqr9q4hAP.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: 7fqr9q4hAP.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

PE file contains sections with non-standard names

Source: 7fqr9q4hAP.exe

Static PE information: section name: _RDATA

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX

Jump to behavior

Source: 7fqr9q4hAP.exe, 00000000.00000002.1798147517.000001BD21650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: lgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmcIGfE

Queries the volume information (name, serial number etc) of a device

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Queries volume information: C:\Users\user\Desktop\7fqr9q4hAP.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\pkg-B5fZlb VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\pkg-B5fZlb VolumeInformation	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
92.113.24.27	jjjjjjjj.click	Ukraine		6849	UKRTELNETUA	false
82.112.247.9	mybackuplinks.com	United Kingdom		15773	INCLARITYGB	false

Contacted Domains

Name	IP	Active
jjjjjjjj.click	92.113.24.27	true
mybackuplinks.com	82.112.247.9	true

AV Detection

Multi AV Scanner detection for domain / URL

Source: jjjjjjjj.click	Virustotal: Detection: 5%	Perma Link
Source: mybackuplinks.com	Virustotal: Detection: 11%	Perma Link
Source: https://jjjjjjjj.click/jjjj/notepad.exe	Virustotal: Detection: 9%	Perma Link

Source: 7fqr9q4hAP.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: jjjjjjjj.click
Source: global traffic	DNS traffic detected: DNS query: mybackuplinks.com

Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://code.google.com/p/closure-compiler/wiki/SourceMaps
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.certigna.fr/certignarootca.crl01
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795617132.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799145146.000001BD230D7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797031859.000001BD230D1000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798181835.000001BD21696000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797766044.000001BD21695000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODOCertificationAuthority.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.dhimyotis.com/certignarootca.crl
Source: 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD21771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.dhimyotis.com/certignarootca.crlt
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1794783312.000001BD23088000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD23090000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD23088000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796956866.000001BD23093000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797098841.000001BD230A2000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799035993.000001BD230A3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797076114.000001BD2309E000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797374452.000001BD230A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000002.1798257284.000001BD216AA000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795572171.000001BD216A9000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.netsolssl.com/NetworkSolutionsCertificateAuthority.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.netsolssl.com/NetworkSolutionsCertificateAuthority.crlzJp
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/SGCA.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/SGCA.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/SGCA.crlyncaughtE
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/STCA.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.securetrust.com/STCA.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.xrampsecurity.com/XGCA.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795617132.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799145146.000001BD230D7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797031859.000001BD230D1000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.xrampsecurity.com/XGCA.crl0
Source: 7fqr9q4hAP.exe	String found in binary or memory: http://narwhaljs.org)
Source: 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.accv.es
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.accv.es0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.com
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.com(
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://policy.camerfirma.comzJp
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://repository.swisssign.com/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://src.chromium.org/viewvc/blink/trunk/Source/devtools/front_end/SourceMap.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://userguide.icu-project.org/strings/properties
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.3waylabs.com/nw/WWW/products/wizcon/vt220.html
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl;
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/legislacion_c.htm
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/legislacion_c.htm0U
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es/legislacion_c.htm=
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.accv.es00
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.cert.fnmt.es/dpcs/
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217A7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798607726.000001BD217CA000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794274255.000001BD217A7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217A7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217C3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD217C7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217C4000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795714926.000001BD217C7000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.firmaprofesional.com/cps0
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.midnight-commander.org/browser/lib/tty/key.c
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadis.bm
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadis.bm0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cps
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cps0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.quovadisglobal.com/cpsSG
Source: 7fqr9q4hAP.exe	String found in binary or memory: http://www.squid-cache.org/Doc/config/half_closed_clients/
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10201
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=10704
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=6593
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=745678
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=25916
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#clear
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://console.spec.whatwg.org/#console-namespace
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#count
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#count-map
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#countreset
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://console.spec.whatwg.org/#table
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://crbug.com/v8/7848
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://cs.chromium.org/chromium/src/v8/tools/SourceMap.js?rcl=dd10454c1d
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/SpiderMonkey/Parser_API
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Equality_comparisons_and_sameness#Loose_equa
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://encoding.spec.whatwg.org
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://encoding.spec.whatwg.org/#textdecoder
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://encoding.spec.whatwg.org/#textencoder
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://esdiscuss.org/topic/isconstructor#content-11
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://gist.github.com/XVilka/8346728#gistcomment-2823421
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/acornjs/acorn/blob/master/acorn/src/identifier.js#L23
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/acornjs/acorn/issues/575
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/antirez/linenoise
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/chalk/ansi-regex/blob/master/index.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/chalk/supports-color
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/da-x/rxvt-unicode/tree/v9.22-with-24bit-color
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/estree/estree/blob/a27003adf4fd7bfad44de9cef372a2eacd527b1c/es5.md#regexpliteral
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/google/caja/blob/master/src/com/google/caja/ses/repairES5.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/google/caja/blob/master/src/com/google/caja/ses/startSES.js
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/wiki/Source-Maps
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/isaacs/color-support.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/joyent/node/issues/3295.
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/libuv/libuv/pull/1501.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/mafintosh/end-of-stream
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/mafintosh/pump
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/mysticatea/abort-controller
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node-v0.x-archive/issues/2876.
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792781831.00000016DF980000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1778339305.000001BD21813000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1791210785.000003BCBBB00000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1790568181.0000005482200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/blob/1a96d83a223ff9f05f7d942fb84440d323f7b596/lib/internal/bootstrap/
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/commit/ec2822adaad76b126b5cccdeaa1addf2376c9aa6
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/commit/f7620fb96d339f704932f9bb9a0dceb9952df2d4
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/10673
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/issues/13435
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/issues/19009
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/2006
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/2119
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/32020
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/3392
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/35475
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/issues/35981
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/12342
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/12607
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/13870#discussion_r124515293
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/1771#issuecomment-119351671
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/21313
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/26334.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/30380#issuecomment-552948364
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/30958
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792781831.00000016DF980000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1778339305.000001BD21813000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1791210785.000003BCBBB00000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787592776.000001BD21821000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1790568181.0000005482200000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33229
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/33661
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/3394
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/nodejs/node/pull/34010
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/34103#issuecomment-652002364
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/34375
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/nodejs/node/pull/35949#issuecomment-722496598
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/standard-things/esm/issues/821.
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/tc39/ecma262/issues/1209
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://github.com/tc39/proposal-ses/blob/e5271cc42a257a05dcae2fd94713ed2f46c08620/shim/src/freeze.j
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://github.com/v8/v8/blob/d6ead37d265d7215cf9c5f768f279e21bd170212/src/js/prologue.js#L152-L156
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://goo.gl/t5IS6M).
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://heycam.github.io/webidl/#define-the-operations
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-class-string
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-default-iterator-object
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#dfn-iterator-prototype-object
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://heycam.github.io/webidl/#es-interfaces
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterable
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterable-entries
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-iterators
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://heycam.github.io/webidl/#es-namespaces
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-operations
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://heycam.github.io/webidl/#es-stringifier
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/browsers.html#ascii-serialisation-of-an-origin
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/browsers.html#concept-origin-opaque
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#dom-setinterval
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://html.spec.whatwg.org/multipage/webappapis.html#windoworworkerglobalscope
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://invisible-island.net/ncurses/terminfo.ti.html#toc-_Specials
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://invisible-island.net/xterm/ctlseqs/ctlseqs.html
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792614653.000001169E5C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://jjjjjjjj.click/jjjj/notepad.exe
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://linux.die.net/man/1/dircolors).
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://mathiasbynens.be/notes/javascript-encoding
Source: 7fqr9q4hAP.exe, 00000000.00000003.1792252629.000000A54EA40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://mybackuplinks.com/PO.exe
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://no-color.org/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://nodejs.org/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://nodejs.org/api/cli.html#cli_unhandled_rejections_mode).
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791324044.000000ECCC100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/api/fs.html
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798238043.000001BD2169E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0-headers.tar.gz
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797647656.000001BD2169C000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798238043.000001BD2169E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0.tar.gz
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0.tar.gzI
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/node-v14.17.0.tar.gzhttps://nodejs.org/download/release
Source: 7fqr9q4hAP.exe, 00000000.00000003.1791648673.000002421B3C0000.00000004.00001000.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797532932.000001BD2168F000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798238043.000001BD2169E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nodejs.org/download/release/v14.17.0/win-x64/node.lib
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.com
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799227922.000001BD230F3000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.com0
Source: 7fqr9q4hAP.exe, 00000000.00000003.1789080435.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794664600.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796638771.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795004919.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798833033.000001BD21807000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1793848322.000001BD217F5000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796231235.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1796029017.000001BD21806000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795081352.000001BD21802000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ocsp.quovadisoffshore.comiab.)
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://sourcemaps.info/spec.html
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://stackoverflow.com/a/5501711/3561
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%iteratorprototype%-object
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://tc39.github.io/ecma262/#sec-%typedarray%.of
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.prototype.tostring
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc2397#section-2
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc3492#section-3.4
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://tools.ietf.org/html/rfc3986#section-3.2.2
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2.2
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://tools.ietf.org/html/rfc7230#section-3.2.6
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7540#section-8.1.2.5
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#cannot-have-a-username-password-port
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-url
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-url-origin
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-byte-serializer
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-parser
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#concept-urlencoded-serializer
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#special-scheme
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://url.spec.whatwg.org/#url
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://url.spec.whatwg.org/#urlsearchparams
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://url.spec.whatwg.org/#urlsearchparams-stringification-behavior
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://v8.dev/blog/v8-release-89
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://w3c.github.io/webappsec-subresource-integrity/#the-integrity-attribute
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://wiki.squid-cache.org/SquidFaq/InnerWorkings#What_is_a_half-closed_filedescriptor.3F
Source: 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.catcert.net/verarrel
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD2176B000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD2176B000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.catcert.net/verarrel05
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-line-terminators
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-promise.all
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/#sec-timeclip
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/5.1/#sec-15.1.3.4
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Alternative
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Atom
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClass
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClassEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtom
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtomNoDash
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ClassRanges
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-ControlLetter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalDigits
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Disjunction
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Hex4Digits
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigit
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigits
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-HexEscapeSequence
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRanges
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRangesNoDash
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-OctalDigit
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Pattern
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-PatternCharacter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-Quantifier
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-QuantifierPrefix
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-RegExpUnicodeEscapeSequence
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-SyntaxCharacter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Assertion
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-AtomEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-CharacterEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassControlLetter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedAtom
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedPatternCharacter
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-IdentityEscape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-InvalidBracedQuantifier
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-LegacyOctalEscapeSequence
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Term
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-atomescape
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.ecma-international.org/ecma-262/8.0/#sec-term
Source: 7fqr9q4hAP.exe	String found in binary or memory: https://www.iana.org/assignments/tls-extensiontype-values
Source: 7fqr9q4hAP.exe, 00000000.00000002.1800475888.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp, 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.unicode.org/Public/UNIDATA/EastAsianWidth.txt
Source: 7fqr9q4hAP.exe, 00000000.00000003.1795115970.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797262598.000001BD230EF000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1797556343.000001BD23101000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1794382519.000001BD230CB000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1795395249.000001BD230ED000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000002.1799248356.000001BD23103000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wwww.certigna.fr/autorites/
Source: 7fqr9q4hAP.exe, 00000000.00000002.1798500438.000001BD21771000.00000004.00000020.00020000.00000000.sdmp, 7fqr9q4hAP.exe, 00000000.00000003.1787882472.000001BD21771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wwww.certigna.fr/autorites/0m

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443

Sample file is different than original file name gathered from version info

Source: 7fqr9q4hAP.exe, 00000000.00000002.1801693394.00007FF7E2A7D000.00000002.00000001.01000000.00000003.sdmp

Binary or memory string: OriginalFilenamenode.exe* vs 7fqr9q4hAP.exe

Source: classification engine

Classification label: mal48.winEXE@2/0@2/2

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6568:120:WilError_03

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

File created: C:\Users\user\AppData\Local\Temp\pkg-B5fZlb

Jump to behavior

Source: 7fqr9q4hAP.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 7fqr9q4hAP.exe	String found in binary or memory: // lib/internal/modules/cjs/loader.js (CommonJS Modules) or
Source: 7fqr9q4hAP.exe	String found in binary or memory: // require('internal/bootstrap/loaders') even when this file is not written in
Source: 7fqr9q4hAP.exe	String found in binary or memory: const loaderId = 'internal/bootstrap/loaders';
Source: 7fqr9q4hAP.exe	String found in binary or memory: // - `lib/internal/bootstrap/loaders.js`: to setup internal binding and
Source: 7fqr9q4hAP.exe	String found in binary or memory: const CJSLoader = require('internal/modules/cjs/loader');
Source: 7fqr9q4hAP.exe	String found in binary or memory: require('internal/bootstrap/loaders').NativeModule.exposeInternals();
Source: 7fqr9q4hAP.exe	String found in binary or memory: const { NativeModule } = require('internal/bootstrap/loaders');
Source: 7fqr9q4hAP.exe	String found in binary or memory: } = require('internal/modules/cjs/loader');
Source: 7fqr9q4hAP.exe	String found in binary or memory: const { NativeModule } = require('internal/bootstrap/loaders');
Source: 7fqr9q4hAP.exe	String found in binary or memory: // Mark this socket as available, AFTER user-added end
Source: 7fqr9q4hAP.exe	String found in binary or memory: const { Module } = require('internal/modules/cjs/loader');

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

File read: C:\Users\user\Desktop\7fqr9q4hAP.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\7fqr9q4hAP.exe "C:\Users\user\Desktop\7fqr9q4hAP.exe"
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Section loaded: fwpuclnt.dll	Jump to behavior

Source: 7fqr9q4hAP.exe

Static PE information: More than 8191 > 100 exports found

Source: 7fqr9q4hAP.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: 7fqr9q4hAP.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: 7fqr9q4hAP.exe

Static file information: File size 31085686 > 1048576

Source: 7fqr9q4hAP.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x102ae00
Source: 7fqr9q4hAP.exe	Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0xc3f400

Source: 7fqr9q4hAP.exe

Static PE information: More than 200 imports for KERNEL32.dll

Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: 7fqr9q4hAP.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: 7fqr9q4hAP.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: 7fqr9q4hAP.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: 7fqr9q4hAP.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

PE file contains sections with non-standard names

Source: 7fqr9q4hAP.exe

Static PE information: section name: _RDATA

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe

Process information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX

Jump to behavior

Source: 7fqr9q4hAP.exe, 00000000.00000002.1798147517.000001BD21650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 7fqr9q4hAP.exe, 00000000.00000000.1774423071.00007FF7E1B6C000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: lgnW2/4/PEZB31jiVg88O8EckzXZOFKs7sjsLjBOlDW0JB9LeGna8gI4zJVSk/BwJVmcIGfE

Queries the volume information (name, serial number etc) of a device

Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Queries volume information: C:\Users\user\Desktop\7fqr9q4hAP.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\pkg-B5fZlb VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\7fqr9q4hAP.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\pkg-B5fZlb VolumeInformation	Jump to behavior

ID:	1532615
Product:	CloudBasic
Start time:	18:49:12
Start date:	13.10.2024
Sample:	7fqr9q4hAP.exe
Cookbook:	default.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	8d775d8bedf3ae799cc244cc1e1c9df5
SHA1:	078a7c8dcbdda58a4158a6936835341b24437187
SHA256:	35e366b9b046cd129968306cf0ffb92f213149a12d48a2e782fd0e25dba28462
Filetype:	Win64 Executable Console (202006/5) 92.65%

Windows Analysis Report
7fqr9q4hAP.exe

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Contacted Domains

Windows Analysis Report 7fqr9q4hAP.exe

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Contacted Domains

Windows Analysis Report
7fqr9q4hAP.exe