Windows Analysis Report
SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe

Overview

General Information

Sample name: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Analysis ID: 1432432
MD5: 5ae909472f400d4341e93df71d808377
SHA1: a6de8d54c5b3e6947bc4fe473e0df4ba05a736c9
SHA256: 82be867f27b0d808f9e6675cdf74ffe071b9e0e0f0168e31b7a94e5226e08bd2
Tags: exe
Infos:

Detection

Score: 30
Range: 0 - 100
Whitelisted: false
Confidence: 0%

Compliance

Score: 33
Range: 0 - 100

Signatures

Found direct / indirect Syscall (likely to bypass EDR)
AV process strings found (often used to terminate AV products)
Contains functionality for read data from the clipboard
Contains functionality to call native functions
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to enumerate running services
Contains functionality to launch a program with higher privileges
Contains functionality to modify clipboard data
Contains functionality to query CPU information (cpuid)
Contains functionality to query locales information (e.g. system language)
Contains functionality to read the PEB
Contains functionality to retrieve information about pressed keystrokes
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Creates COM task schedule object (often to register a task for autostart)
Creates a process in suspended mode (likely to inject code)
Detected potential crypto function
Drops PE files
Drops files with a non-matching file extension (content does not match file extension)
EXE planting / hijacking vulnerabilities found
Enables debug privileges
Extensive use of GetProcAddress (often used to hide API calls)
File is packed with WinRar
Found dropped PE file which has not been started or loaded
Found evasive API chain (date check)
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
PE file contains an invalid checksum
PE file contains executable resources (Code or Archives)
PE file contains sections with non-standard names
PE file does not import any functions
Queries information about the installed CPU (vendor, model number etc)
Sample file is different than original file name gathered from version info
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)
Uses the system / local time for branch decision (may execute only at specific dates)

Classification

EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\testlasso.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\CPUEater.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ThreadRacer.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ProcessLassoLauncher.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: PostUpdate.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\TweakScheduler.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\vistammsc.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\InstallHelper.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ProcessLasso.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ProcessGovernor.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\Insights.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\LogViewer.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\plActivate.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\bitsumsessionagent.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\PostUpdate.exe Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe EXE: C:\Users\user\Desktop\QuickUpgrade.exe Jump to behavior
Source: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&title=Get%20Process%20Lasso%20Pro&referrer=&muid=NA&sid=NA&version=6&preview=false HTTP Parser: No favicon
Source: https://m.stripe.network/inner.html#url=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&title=Get%20Process%20Lasso%20Pro&referrer=&muid=NA&sid=NA&version=6&preview=false HTTP Parser: No favicon
Source: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&title=Get%20Process%20Lasso%20Pro&referrer=&muid=bdcf309f-c914-4675-b703-3cdaae015472419473&sid=cf5b381f-d5d3-44ee-9572-244df1775810575440&version=6&preview=false HTTP Parser: No favicon

Compliance
barindex
EXE planting / hijacking vulnerabilities found
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\testlasso.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\CPUEater.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ThreadRacer.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ProcessLassoLauncher.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: PostUpdate.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\TweakScheduler.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\vistammsc.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\InstallHelper.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ProcessLasso.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\ProcessGovernor.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\Insights.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\LogViewer.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\plActivate.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\bitsumsessionagent.exe Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe EXE: C:\Users\user\Desktop\PostUpdate.exe Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe EXE: C:\Users\user\Desktop\QuickUpgrade.exe Jump to behavior
Uses 32bit PE files
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: certificate valid
Source: unknown HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49900 version: TLS 1.2
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_korean.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_korean.dll.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_polish.pdb source: pl_rsrc_polish.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\LogViewer.pdb source: LogViewer.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_ptbr.pdb source: pl_rsrc_ptbr.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_french.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_bulgarian.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008165000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr
Source: Binary string: c:\pl\output\testlasso.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_japanese.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_japanese.dll.0.dr
Source: Binary string: c:\pl\output\PostUpdate.pdb source: PostUpdate.exe, 00000004.00000002.1727238245.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp, PostUpdate.exe, 00000004.00000000.1691618206.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_german.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese_traditional.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\QuickUpgrade.pdb$ source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, QuickUpgrade.exe.4.dr, QuickUpgrade.exe.Replacement.0.dr
Source: Binary string: c:\pl\output\InstallHelper.pdbi source: InstallHelper.exe.0.dr
Source: Binary string: c:\pl\output\PostUpdate.pdbZ source: PostUpdate.exe, 00000004.00000002.1727238245.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp, PostUpdate.exe, 00000004.00000000.1691618206.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\Insights.pdb source: Insights.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_finnish.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_slovenian.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr
Source: Binary string: c:\pl\output\CPUEater.pdba source: CPUEater.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_italian.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_italian.dll.0.dr
Source: Binary string: c:\pl\output\vistammsc.exe.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008114000.00000004.00000020.00020000.00000000.sdmp, vistammsc.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_german.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\Insights.pdbd source: Insights.exe.0.dr
Source: Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: Binary string: c:\pl\output\pl_rsrc_russian.pdbGCTL source: pl_rsrc_russian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\LogViewer.pdbJ source: LogViewer.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_french.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr
Source: Binary string: c:\pl\output\ProcessLassoLauncher.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp, ProcessLassoLauncher.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_slovenian.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\QuickUpgrade.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, QuickUpgrade.exe.4.dr, QuickUpgrade.exe.Replacement.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_bulgarian.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008165000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr
Source: Binary string: c:\pl\output\ProcessGovernor.pdbGCTL source: ProcessGovernor.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\x64\Release\bitsumsessionagent.pdb source: bitsumsessionagent.exe, 00000005.00000000.1725416053.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp, bitsumsessionagent.exe, 00000005.00000002.2874427195.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp, bitsumsessionagent.exe, 00000007.00000002.1757953890.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp, bitsumsessionagent.exe, 00000007.00000000.1752515463.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp
Source: Binary string: c:\pl\output\pl_rsrc_finnish.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_italian.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_italian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese_traditional.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr
Source: Binary string: c:\pl\output\CPUEater.pdb source: CPUEater.exe.0.dr
Source: Binary string: c:\pl\output\ThreadRacer.exe.pdbT source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp, ThreadRacer.exe.0.dr
Source: Binary string: c:\pl\output\ProcessGovernor.pdb source: ProcessGovernor.exe.0.dr
Source: Binary string: c:\pl\output\InstallHelper.pdb source: InstallHelper.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_russian.pdb source: pl_rsrc_russian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_japanese.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_japanese.dll.0.dr
Source: Binary string: c:\pl\output\vistammsc.exe.pdbY source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008114000.00000004.00000020.00020000.00000000.sdmp, vistammsc.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_spanish.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_spanish.dll.0.dr
Source: Binary string: c:\pl\output\ThreadRacer.exe.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp, ThreadRacer.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_ptbr.pdbGCTL source: pl_rsrc_ptbr.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\ProcessLasso.pdb source: ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\plActivate.pdb source: plActivate.exe.0.dr
Creates COM task schedule object (often to register a task for autostart)
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD} Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32 Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32 Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD} Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32 Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32 Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32 Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD} Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD} Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0058BA94 FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError, 0_2_0058BA94
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0059D420 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW, 0_2_0059D420
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C6A94 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose, 4_2_00007FF61D3C6A94
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B72048 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose, 5_2_00007FF714B72048
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8C1C90 FindFirstFileW,GetFileAttributesW,FindNextFileW,_invalid_parameter_noinfo,DeleteFileW,DeleteFileW,RemoveDirectoryW,GetFileAttributesW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,FindFirstFileW,DeleteFileW,FindNextFileW,RemoveDirectoryW,GetFileAttributesW, 6_2_00007FF72D8C1C90
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 151.101.0.176 151.101.0.176
Source: Joe Sandbox View IP Address: 198.137.150.141 198.137.150.141
Source: Joe Sandbox View IP Address: 192.0.76.3 192.0.76.3
Source: Joe Sandbox View IP Address: 192.0.76.3 192.0.76.3
Source: Joe Sandbox View IP Address: 44.237.125.219 44.237.125.219
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: unknown TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8E4070 InternetOpenW,InternetOpenUrlW,InternetReadFile,InternetCloseHandle,InternetCloseHandle, 6_2_00007FF72D8E4070
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+79UPCBWOyUrAT4&MD=aNBF4HwC HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=35eac6e98b37c7568cceeeeb456d12a3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=35eac6e98b37c7568cceeeeb456d12a3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/easy-digital-downloads-pro/includes/blocks/assets/css/edd-blocks.css?ver=3.2.11 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/redux-framework/redux-core/assets/css/extendify-utilities.css?ver=4.4.15 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/bitsum-wp//css/edd-supplemental-styles.css?ver=35eac6e98b37c7568cceeeeb456d12a3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/theme-my-login/assets/styles/theme-my-login.min.css?ver=7.1.7 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /v3/?ver=v3 HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/nextgen-gallery/static/Lightbox/fancybox/jquery.fancybox-1.3.4.css?ver=3.59.2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/easy-digital-downloads-pro/assets/css/edd.min.css?ver=3.2.11 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/edd-software-licensing/assets/css/edd-sl.css?ver=3.8.11 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/edd-multi-currency/assets/build/style-frontend.css?ver=1.1.1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/edd-recurring/assets/css/styles.css?ver=2.12.3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/css/plugins.css?ver=20231028 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/style.css?ver=202306092 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/css/custom.css?ver=35eac6e98b37c7568cceeeeb456d12a3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/skins/default/skin.css?ver=35eac6e98b37c7568cceeeeb456d12a3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.6 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/tml-social/assets/styles/tml-social.min.css?ver=1.1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/jetpack/css/jetpack.css?ver=13.3.1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/google-analytics-premium/assets/js/frontend-gtag.min.js?ver=8.26.0 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/nextgen-gallery/static/Legacy/ajax.min.js?ver=3.59.2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/edd-user-history/assets/js/tracking.js?ver=1.2.0 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/edd-recurring/assets/js/edd-frontend-recurring.js?ver=2.12.3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /js/anchor-offset.js?ver=2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178118 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=7.6 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=7.6 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/theme-my-login/assets/scripts/theme-my-login.min.js?ver=7.1.7 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/nextgen-gallery/static/GalleryDisplay/common.js?ver=3.59.2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/nextgen-gallery/static/Lightbox/lightbox_context.js?ver=3.59.2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/nextgen-gallery/static/Lightbox/fancybox/jquery.easing-1.3.pack.js?ver=3.59.2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178124 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; _ga_ZV0D0J286B=GS1.1.1714178119.1.0.1714178119.60.0.0; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5
Source: global traffic HTTP traffic detected: GET /e-202417.js HTTP/1.1Host: stats.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/nextgen-gallery/static/Lightbox/fancybox/jquery.fancybox-1.3.4.pack.js?ver=3.59.2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/easy-digital-downloads-pro/assets/js/edd-ajax.js?ver=3.2.11 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/nextgen-gallery/static/Lightbox/fancybox/nextgen_fancybox_init.js?ver=3.59.2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bitsum.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://bitsum.com/wp-content/themes/meminz/css/plugins.css?ver=20231028Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/fonts/open-sans/opensans-regular-webfont.woff2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bitsum.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://bitsum.com/wp-content/themes/meminz/css/plugins.css?ver=20231028Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bitsum.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://bitsum.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=7.6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/lib/bower/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bitsum.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://bitsum.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=7.6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/img/pricing-line.png HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/wp-content/themes/meminz/style.css?ver=202306092Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/bitsum_logo_transparent.png HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/jetpack/_inc/build/widgets/eu-cookie-law/eu-cookie-law.min.js?ver=20180522 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=7.6 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/img/pricing-line.png HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/plugins/edd-multi-currency/assets/build/frontend.js?ver=1.1.1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/js/plugins.js?ver=35eac6e98b37c7568cceeeeb456d12a3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/bitsum_logo_transparent.png HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/js/custom.js?ver=20231102 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=4629&rand=0.3235756268755505 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/30dayrefund-e1605890583229.png HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=35eac6e98b37c7568cceeeeb456d12a3 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/30dayrefund-e1605890583229.png HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /inner.html HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=4629&rand=0.3235756268755505 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /out-4.5.43.js HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.stripe.network/inner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178132 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178127.52.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3385&rand=0.4022322553563107 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178134.45.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=0&rand=0.5823933832413537 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3385&rand=0.4022322553563107 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/favicon.png HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178134.45.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=0&rand=0.5823933832413537 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/favicon.png HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178134.45.0.0
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178134.45.0.0
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178134.45.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178139 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178134.45.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/fonts/open-sans/opensans-bold-webfont.woff2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bitsum.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://bitsum.com/wp-content/themes/meminz/css/plugins.css?ver=20231028Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178139.40.0.0; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440
Source: global traffic HTTP traffic detected: GET /wp-content/themes/meminz/fonts/open-sans/opensans-light-webfont.woff2 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bitsum.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://bitsum.com/wp-content/themes/meminz/css/plugins.css?ver=20231028Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178139.40.0.0; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2815&rand=0.33463708251087443 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178139.40.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2815&rand=0.33463708251087443 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178139.40.0.0
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178139.40.0.0
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178146 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178139.40.0.0
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178148.31.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2995&rand=0.5630717407710482 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2995&rand=0.5630717407710482 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178148.31.0.0
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+79UPCBWOyUrAT4&MD=aNBF4HwC HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178153.26.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178153 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178153.26.0.0
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178153.26.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1901&rand=0.5844304853361733 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1901&rand=0.5844304853361733 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178153.26.0.0
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178153.26.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178159 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178153.26.0.0
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3229&rand=0.6605735035558935 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178161.18.0.0
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3229&rand=0.6605735035558935 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178161.18.0.0
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178161.18.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178167 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178161.18.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2888&rand=0.17584099737033543 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178168.11.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2888&rand=0.17584099737033543 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178168.11.0.0
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178174.5.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178175 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178174.5.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=0&rand=0.9114243600301877 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178175.4.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=0&rand=0.9114243600301877 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178175.4.0.0
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178175.4.0.0
Source: global traffic HTTP traffic detected: GET /v3/?ver=v3 HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "206d0cb0f8a398cba3f6c5c045508c70"If-Modified-Since: Fri, 26 Apr 2024 18:01:23 GMT
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178180 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178175.4.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3282&rand=0.5681925783642812 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3282&rand=0.5681925783642812 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178182.60.0.0
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178182.60.0.0
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178187.55.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178187 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178187.55.0.0
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1852&rand=0.7873146752310403 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1852&rand=0.7873146752310403 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178188.54.0.0
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178188.54.0.0
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178188.54.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178194 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178188.54.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3020&rand=0.2054094452619757 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3020&rand=0.2054094452619757 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178195.47.0.0
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178195.47.0.0
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178195.47.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178201 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178195.47.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1673&rand=0.4563951407778424 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178201.41.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1673&rand=0.4563951407778424 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178201.41.0.0
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178201.41.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178207 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178208.34.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2620&rand=0.6121610810402847 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178208.34.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2620&rand=0.6121610810402847 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET /get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178208.34.0.0
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: global traffic HTTP traffic detected: GET /?custom-css=c8bee26073 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178214.28.0.0
Source: global traffic HTTP traffic detected: GET /wp-content/uploads/redux/custom-fonts/fonts.css?ver=1714178214 HTTP/1.1Host: bitsum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178214.28.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1709&rand=0.9026727643311079 HTTP/1.1Host: pixel.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: bitsum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6589i1ceno91cucv8e2oi256ha; _ga=GA1.1.1877982582.1714178120; edduh_hash=1f199ca0056c8ccf04b80e579631bdb5; __stripe_mid=bdcf309f-c914-4675-b703-3cdaae015472419473; __stripe_sid=cf5b381f-d5d3-44ee-9572-244df1775810575440; _ga_ZV0D0J286B=GS1.1.1714178119.1.1.1714178214.28.0.0
Source: global traffic HTTP traffic detected: GET /g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=1709&rand=0.9026727643311079 HTTP/1.1Host: pixel.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=ca1db0ad-321c-4c83-bcd3-6f78cd783370655988; cid=92483e88-412a-43a5-828c-19c846617d0a
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=92483e88-412a-43a5-828c-19c846617d0a; __Host-stripe.mkt.csrf=85tLUUz43tXPjUHIdzu74v7AjQjtUSqU0kBBg_fMCrzc9WN0HX6wkQbh05FEdX35KPOmynphydfwRaKNndmKDzw-AcAXe4YkSDUuvlflYT5qafX53ZEeflBBgPdp3sQ6zIXhFjyD3w%3D%3D
Source: chromecache_214.3.dr String found in binary or memory: "https://www.facebook.com/StripeHQ", equals www.facebook.com (Facebook)
Source: chromecache_214.3.dr String found in binary or memory: "https://www.linkedin.com/company/stripe/", equals www.linkedin.com (Linkedin)
Source: chromecache_214.3.dr String found in binary or memory: href="https://www.youtube.com/watch?v=GnSlQz-14JY" equals www.youtube.com (Youtube)
Source: chromecache_195.3.dr String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: global traffic DNS traffic detected: DNS query: google.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: bitsum.com
Source: global traffic DNS traffic detected: DNS query: js.stripe.com
Source: global traffic DNS traffic detected: DNS query: stats.wp.com
Source: global traffic DNS traffic detected: DNS query: v0.wordpress.com
Source: global traffic DNS traffic detected: DNS query: analytics.google.com
Source: global traffic DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: pixel.wp.com
Source: global traffic DNS traffic detected: DNS query: m.stripe.network
Source: global traffic DNS traffic detected: DNS query: m.stripe.com
Source: global traffic DNS traffic detected: DNS query: stripe.com
Source: unknown HTTP traffic detected: POST /g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178118368&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=1&sid=1714178119&sct=1&seg=0&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=4182 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://bitsum.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://bitsum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: ThreadRacer.exe.0.dr String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: chromecache_246.3.dr String found in binary or memory: http://daneden.me/animate
Source: chromecache_246.3.dr String found in binary or memory: http://fontawesome.io
Source: chromecache_246.3.dr String found in binary or memory: http://fontawesome.io/license
Source: chromecache_219.3.dr, chromecache_246.3.dr String found in binary or memory: http://getbootstrap.com)
Source: chromecache_250.3.dr String found in binary or memory: http://go.wpbakery.com/licensing
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://ocsp.digicert.com0
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://ocsp.digicert.com0A
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://ocsp.digicert.com0C
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://ocsp.digicert.com0X
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: http://www.digicert.com/CPS0
Source: chromecache_219.3.dr String found in binary or memory: http://www.gmarwaha.com/jquery/jcarousellite/
Source: pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://Bitsum.com
Source: ProcessLasso.exe String found in binary or memory: https://activate.bitsum.com/?
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, QuickUpgrade.exe.4.dr, QuickUpgrade.exe.Replacement.0.dr, plActivate.exe.0.dr String found in binary or memory: https://activate.bitsum.com/?Process
Source: ProcessLasso.exe String found in binary or memory: https://activate.bitsum.com/check.php
Source: chromecache_195.3.dr String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_195.3.dr String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_214.3.dr String found in binary or memory: https://assets.ctfassets.net
Source: chromecache_214.3.dr String found in binary or memory: https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/1a930247.woff2)
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedCodeEditor-86776e0635434fc49715.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AtlasDashboardGraphic-042f01c5c5f7a5d7ca1a.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-U4EH6MZP.js
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModal-77aed9e8900fc44f1554.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModalGraphic-e9e1fc8f4c2bf8a9bd44.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CaseStudyCard-60f3f5412530e6e993e8.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditor-6eacb8e42c7465ddd557.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorLineNumbers-0eded1c84476ec649145.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeSyntax-e0768ef33503219c518d.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeTerminal-ca23848effb056969042.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CopyTitle-c641e014b3946628bc95.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardOverlay-09e527d11b6471566771.cs
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarousel-6ad3f0dce85838a77d8b.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavGroup-41fa77c08914b1b778
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DomGraphic-5a317684eb2b9d1f76d2.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Flag-0530f6f8a0ae1e011860.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Form-401d42df82b6e8482f06.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphic-c9e3aeda05ab14a454b1.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicLogo-2cee099c6b840fb58d86.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-4d3b73ee5f599b93aa50.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagram-bcf0320e44c152e1ca03.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagramOrderNotification-b0f6b26d
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnection-192c60d5ff4ac27dec4f.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicImage-ff4d221174ca6cab4402.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicOutline-cbb29a27650befdb3913.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIcon-f22f360dadf72ca61a47.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconGrid-f5ddeb3e7d94044a9646.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconOutline-2c0929473dcd28db2e99.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingCard-b80b51aa94acdc8a688e.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsGraphic-45fe2caceea82c749c40.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Globe-b2159f87180df559d2e8.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GradientLegend-f1cabc70fbf82f3e9c05.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicForm-7d75b8ba72e0304da82c.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormField-33f78921d62dc714d424.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInputGrid-281fa6a92c2e3caa14c9.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/InvoicingFeatureGraphic-db95f6cbfa638cca151e.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/List-d4c6ad06c173a7dca2ed.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LocaleControl-09ce62c550a15bb456e5.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LowCodeNoCode-de32a3423ce25c839d82.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/MobileStickyNav-e95ca4c4af5266ca01f2.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/MobileStickyNavControl-1518a74559667e928374.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksFeatureGraphic-6c9382201d4ede7c851a.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Picture-3f0067e6b392244c9bda.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductBadge-aa2497ab8abdcc6a3d34.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/RowLayout-9272a8ee72d3dac4a6ef.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSection-1c0a8e1d30b69be4ef69.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSectionSupportLinkList-US-bf39e598e6b8dad8c
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StartUp-889f28d89767c8a9d60f.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsedList-4a8c16b5e5f3fa51247d.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Track-2f2fce741fc3d8fc8450.css
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ac6713d5.woff)
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2)
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/imt-c6ded89a5ffeadd7b2d892a031e97252.js
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/store-936f0d847a16164e7f6b15d74659c4a9.html
Source: chromecache_214.3.dr String found in binary or memory: https://b.stripecdn.com/stripethirdparty-srv/assets/
Source: pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr String found in binary or memory: https://bitsum.com-sivusto.
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr String found in binary or memory: https://bitsum.com-sivustolta.
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_russian.dll.0.dr, pl_rsrc_polish.dll.0.dr, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com.
Source: pl_rsrc_russian.dll.0.dr, pl_rsrc_polish.dll.0.dr, pl_rsrc_french.dll.0.dr, pl_rsrc_bulgarian.dll.0.dr, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008075000.00000004.00000020.00020000.00000000.sdmp, TweakScheduler.exe.0.dr String found in binary or memory: https://bitsum.com/%xtweakscheduler.exelassopecparkbitsumalaInstallerLanguageDWORDBitsumSOFTWARE
Source: pl_rsrc_ptbr.dll.0.dr String found in binary or memory: https://bitsum.com/1A
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_english.dll.0.dr, pl_rsrc_japanese.dll.0.dr String found in binary or memory: https://bitsum.com/3Current
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr String found in binary or memory: https://bitsum.com/4
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr String found in binary or memory: https://bitsum.com/4Version
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/7Aktuelle
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_italian.dll.0.dr String found in binary or memory: https://bitsum.com/9La
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_spanish.dll.0.dr String found in binary or memory: https://bitsum.com/:La
Source: pl_rsrc_polish.dll.0.dr String found in binary or memory: https://bitsum.com/=Wersja
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, QuickUpgrade.exe.4.dr, QuickUpgrade.exe.Replacement.0.dr String found in binary or memory: https://bitsum.com/?prod=pl&update_error_sigError
Source: ProcessLasso.exe String found in binary or memory: https://bitsum.com/apps/coredirector
Source: LogViewer.exe.0.dr String found in binary or memory: https://bitsum.com/bad
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr String found in binary or memory: https://bitsum.com/changelog/pl/changes.htm#latest?inproduct
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/changelog/pl/changes.htm#latest?inproduct(Virtuelle
Source: ProcessLasso.exe String found in binary or memory: https://bitsum.com/changes/processlasso/
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008075000.00000004.00000020.00020000.00000000.sdmp, TweakScheduler.exe.0.dr String found in binary or memory: https://bitsum.com/check.phphttps://activate.bitsum.com/check.phpCHECK_OKUNSPECIFIEDstring
Source: Insights.exe.0.dr String found in binary or memory: https://bitsum.com/cpubalance/%dProBalanceProBalanceToday%s
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/docs/pl
Source: ProcessLasso.exe, 00000006.00000003.2626467419.0000021EFA336000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2FE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1#a
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2FE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=16F8
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2FE000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000003.2626467419.0000021EFA336000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1=1
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1?
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2FE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1Ia
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2FE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1JT
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2FE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1SD
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1s
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2FE000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1z6R
Source: ProcessLasso.exe String found in binary or memory: https://bitsum.com/get-process-lasso-server-edition/
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008075000.00000004.00000020.00020000.00000000.sdmp, TweakScheduler.exe.0.dr String found in binary or memory: https://bitsum.com/get-process-lasso-server-edition/-https://activate.bitsum.com/?Process
Source: Insights.exe.0.dr String found in binary or memory: https://bitsum.com/get-process-lasso-server-edition/https://activate.bitsum.com/?Process
Source: ProcessLasso.exe String found in binary or memory: https://bitsum.com/keep-running-gaas-info
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://bitsum.com/keep-running-gaas-infoGlobal
Source: ProcessGovernor.exe.0.dr String found in binary or memory: https://bitsum.com/minidumps
Source: ProcessLasso.exe String found in binary or memory: https://bitsum.com/minidumps/
Source: pl_rsrc_bulgarian.dll.0.dr, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/minidumps/.
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000083B9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008935000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007C4F000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000081CB000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008F05000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007878000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008D14000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008749000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008B1E000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000090F5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008580000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007A60000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.0000022626341000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC1C1000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/parkcontrol/
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://bitsum.com/parkcontrol/?inproduct
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproduct
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproduct0VIRHE
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_english.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproduct6ERROR
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_italian.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproduct:ERRORE
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproductCERREUR
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproductE
Source: pl_rsrc_ptbr.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproductFERRO
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_spanish.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproductFERROR
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_russian.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproductH
Source: pl_rsrc_polish.dll.0.dr String found in binary or memory: https://bitsum.com/pl_last_w2k.php?inproductIBA
Source: Insights.exe.0.dr String found in binary or memory: https://bitsum.com/portfolio/cpubalance/FThttps://bitsum.com/members/purchase-history/14.0.3.3
Source: ProcessLasso.exe String found in binary or memory: https://bitsum.com/processlasso-docs/#processmatch
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://bitsum.com/processlasso-docs/#processmatch;
Source: Insights.exe.0.dr String found in binary or memory: https://bitsum.com/processlasso-docs/#processmatchhttps://activate.bitsum.com/check.phpCHECK_OKarbgc
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000083B9000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008935000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007C4F000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000081CB000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008F05000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007878000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008D14000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008749000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008B1E000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000090F5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008580000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007A60000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.0000022626341000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC1C1000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/
Source: pl_rsrc_russian.dll.0.dr, pl_rsrc_polish.dll.0.dr, pl_rsrc_french.dll.0.dr, pl_rsrc_bulgarian.dll.0.dr, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_spanish.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct1Quedan
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct2Za
Source: pl_rsrc_ptbr.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct7H
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct7Process
Source: pl_rsrc_polish.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct8PozostaB
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct:Es
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct:Il
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_english.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct;There
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/?inproduct?
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://bitsum.com/processlasso/Explorer-Process
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/purchase/?inproduct
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/processlasso/purchase/commercial/?inproduct1https://bitsum.com/processlasso/serve
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, pl_rsrc_polish.dll.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproduct
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproductO
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_russian.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproductT
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_english.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproducta
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproductd
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproductu
Source: pl_rsrc_ptbr.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproductw
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr String found in binary or memory: https://bitsum.com/prolasso_older_versions.php?inproduct~
Source: ProcessLasso.exe String found in binary or memory: https://bitsum.com/step1/
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://bitsum.com/step1/writetestFT%d%l%s
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/support.
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, pl_rsrc_russian.dll.0.dr String found in binary or memory: https://bitsum.com/support/?inproduct
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/support/?inproducte
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_japanese.dll.0.dr String found in binary or memory: https://bitsum.com/support/?inproductf3uW03
Source: pl_rsrc_polish.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failure
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failure#
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failure$
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_japanese.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failure/
Source: pl_rsrc_korean.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failure5
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_spanish.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failureG
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_english.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failureH
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failureN
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failureS
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_italian.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failureU
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failureV
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr, pl_rsrc_german.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failureX
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_russian.dll.0.dr String found in binary or memory: https://bitsum.com/support/index.php?renewal=14https://bitsum.com/support/index.php?general_failure_
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, PostUpdate.exe, 00000004.00000002.1726519743.00000226263CF000.00000002.00000001.01000000.0000000D.sdmp, ProcessLasso.exe, ProcessLasso.exe, 00000006.00000002.2874987851.0000021EFC24F000.00000002.00000001.01000000.0000000D.sdmp, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, pl_rsrc_russian.dll.0.dr String found in binary or memory: https://bitsum.com/translate/
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com/translate/-
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr String found in binary or memory: https://bitsum.com/translate//
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://bitsum.com/translate/ERROR-
Source: pl_rsrc_korean.dll.0.dr String found in binary or memory: https://bitsum.com/translate/F
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, pl_rsrc_ptbr.dll.0.dr, pl_rsrc_korean.dll.0.dr, pl_rsrc_chinese.dll.0.dr, pl_rsrc_english.dll.0.dr, pl_rsrc_slovenian.dll.0.dr, QuickUpgrade.exe.4.dr, InstallHelper.exe.0.dr, QuickUpgrade.exe.Replacement.0.dr, pl_rsrc_finnish.dll.0.dr, pl_rsrc_chinese_traditional.dll.0.dr, pl_rsrc_japanese.dll.0.dr, pl_rsrc_italian.dll.0.dr, pl_rsrc_spanish.dll.0.dr, CPUEater.exe.0.dr, Insights.exe.0.dr, pl_rsrc_russian.dll.0.dr, ProcessGovernor.exe.0.dr, pl_rsrc_polish.dll.0.dr, plActivate.exe.0.dr, pl_rsrc_french.dll.0.dr String found in binary or memory: https://bitsum.com0/
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr String found in binary or memory: https://bitsum.com3
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr String found in binary or memory: https://bitsum.com5
Source: pl_rsrc_korean.dll.0.dr String found in binary or memory: https://bitsum.comD
Source: pl_rsrc_korean.dll.0.dr String found in binary or memory: https://bitsum.comLBitsumX
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_japanese.dll.0.dr String found in binary or memory: https://bitsum.comb
Source: chromecache_195.3.dr String found in binary or memory: https://cct.google/taggy/agent.js
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr String found in binary or memory: https://cn.bitsum.com
Source: chromecache_214.3.dr String found in binary or memory: https://dashboard.stripe.com/
Source: chromecache_214.3.dr String found in binary or memory: https://dashboard.stripe.com/register
Source: chromecache_271.3.dr, chromecache_266.3.dr String found in binary or memory: https://fontawesome.com
Source: chromecache_271.3.dr, chromecache_266.3.dr String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_242.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_242.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_242.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_242.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_242.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_242.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_242.3.dr String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_219.3.dr String found in binary or memory: https://github.com/ganeshmax/jcarousellite/blob/master/LICENSE)
Source: chromecache_219.3.dr String found in binary or memory: https://github.com/kswedberg/jquery-smooth-scroll
Source: chromecache_219.3.dr String found in binary or memory: https://github.com/kswedberg/jquery-smooth-scroll/blob/master/LICENSE-MIT)
Source: chromecache_214.3.dr String found in binary or memory: https://github.com/stripe-samples
Source: chromecache_219.3.dr String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1ctgMwd2p9euFW9pPSM7jR/451d5e987ca7fa14060526e6b1766a8b/bm
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1lCtk48IB26AGgXdHsrLrt/ad2816d6a744d5249c19ba66be22b0a6/ch
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43/fa
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/3AGidihOJl4nH9D1vDjM84/9540155d584be52fc54c443b6efa4ae6/ho
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4jq1Wguyus7CA7yc2kxMgn/cf7b01aadf305daef40ac8acab654510/ho
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4zeFefnpB8yh7U3qSQRktP/d583ee93dd3d8910fa27296748699a0f/bm
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5C5LvT3YZvRTGYn7uabXGj/7da8063dc77c67b7f66a1479f47409c8/bu
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5DaqGgXeMbxSIqQj9WSqSF/8142c0c6e15b27a8bb6c8a0f8a5d4dfb/ho
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5epSdhifMhjZWOkOxK9xG8/05715737a672f2069c17903d2acae585/ty
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5hEVwGQfvUQhsMjfASiuA/db4e12749695dbf5735787879ae56e96/fla
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074/ty
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6c56LuWUxcACbVkv4fqszI/d0a88e48d11a88b97daf896246ac40da/ho
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7C4ROeiaqUa0HwwBU9EL9l/205ad1141f35c449a79c7dae1811d9b7/at
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7jjWJlm9NHgLI7SV98B0Dg/ea1ae753f3764897fa4333311e41f496/ho
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79/ho
Source: chromecache_214.3.dr String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/wEsTNDVgdEqaPAKkFdqnL/c69e1649432f1b772d86d81e423b7e3e/but
Source: chromecache_234.3.dr String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Source: ProcessLasso.exe, ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://lic.bitsum.com/versioninfo/processlasso/attribs.txt
Source: chromecache_249.3.dr String found in binary or memory: https://m.stripe.network
Source: chromecache_214.3.dr String found in binary or memory: https://marketplace.stripe.com/
Source: chromecache_195.3.dr String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_195.3.dr String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_214.3.dr String found in binary or memory: https://press.stripe.com/
Source: chromecache_214.3.dr String found in binary or memory: https://q.stripe.com
Source: chromecache_214.3.dr String found in binary or memory: https://sales-live-chat.stripe.com
Source: chromecache_214.3.dr String found in binary or memory: https://sales-live-chat.stripe.com/render
Source: chromecache_214.3.dr String found in binary or memory: https://schema.org
Source: chromecache_195.3.dr String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_195.3.dr String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_214.3.dr String found in binary or memory: https://status.stripe.com/
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/#organization
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/ae
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/at
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/au
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/br
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/contact/sales
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/de
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/de-be
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/de-ch
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/de-li
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/de-lu
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/api
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/billing
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/changelog
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/connect
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/connectors
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/development
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/invoicing/hosted-invoice-page
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/libraries
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/no-code
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/no-code/payment-links
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/no-code/tap-to-pay
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/payments
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/payments/checkout
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/stripe-apps
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/terminal
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/docs/upgrades#api-versions
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-at
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-be
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-bg
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-br
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-ca
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-ch
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-cy
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-cz
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-de
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-dk
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-ee
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-es
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-fi
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-fr
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-gi
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-gr
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-hk
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-hr
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-hu
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-it
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-jp
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-li
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-lt
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-lu
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-lv
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-mt
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-mx
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-my
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-nl
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-no
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-pl
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-pt
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-ro
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-se
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-sg
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-si
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-sk
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/en-th
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/es
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/es-us
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/fr
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/fr-be
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/fr-ca
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/fr-ch
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/fr-lu
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/gb
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/guides
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/ie
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/in
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/issuing
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/it
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/it-ch
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/it-hr
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/it-si
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/jp
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/mx
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/nl
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/nl-be
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/nz
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/pricing
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/privacy
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/pt-pt
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/radar
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/se
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/sigma
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/spc/licenses
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/sv-fi
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/th
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/us
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/use-cases/global-businesses
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/zh-hk
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/zh-my
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/zh-sg
Source: chromecache_214.3.dr String found in binary or memory: https://stripe.com/zh-us
Source: chromecache_214.3.dr String found in binary or memory: https://support.stripe.com/?referrerLocale=en-us
Source: chromecache_195.3.dr String found in binary or memory: https://td.doubleclick.net
Source: chromecache_214.3.dr String found in binary or memory: https://twitter.com/stripe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, QuickUpgrade.exe.4.dr, QuickUpgrade.exe.Replacement.0.dr String found in binary or memory: https://update.bitsum.com/files/auto/64/beta/pl4sfx.exeUpdate
Source: ProcessLasso.exe String found in binary or memory: https://update.bitsum.com/userservices/versioninfo.php
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://update.bitsum.com/userservices/versioninfo.php&Platform=&Registered=&vnew=1?ProductName=&man
Source: chromecache_250.3.dr String found in binary or memory: https://wpbakery.com)
Source: chromecache_195.3.dr String found in binary or memory: https://www.google.com
Source: ProcessLasso.exe String found in binary or memory: https://www.google.com/search?q=%s
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp, ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr String found in binary or memory: https://www.google.com/search?q=%sopenProcess
Source: chromecache_195.3.dr String found in binary or memory: https://www.googleadservices.com
Source: chromecache_195.3.dr String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_214.3.dr String found in binary or memory: https://www.linkedin.com/company/stripe/
Source: chromecache_195.3.dr String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_214.3.dr String found in binary or memory: https://www.youtube.com/watch?v=GnSlQz-14JY
Source: chromecache_214.3.dr String found in binary or memory: https://youtube.com/
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.4:49900 version: TLS 1.2
Contains functionality for read data from the clipboard
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AC280 GetAsyncKeyState,IsWindow,GetWindowTextW,GetDlgItem,IsWindow,GetWindowTextW,GetWindow,IsWindow,GetClassNameW,GetWindowTextW,GetWindow,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,GlobalUnlock,SetClipboardData,CloseClipboard, 4_2_00007FF61D3AC280
Contains functionality to modify clipboard data
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AC280 GetAsyncKeyState,IsWindow,GetWindowTextW,GetDlgItem,IsWindow,GetWindowTextW,GetWindow,IsWindow,GetClassNameW,GetWindowTextW,GetWindow,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,GlobalUnlock,SetClipboardData,CloseClipboard, 4_2_00007FF61D3AC280
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D893E20 GlobalAlloc,GlobalLock,GlobalUnlock,OpenClipboard,EmptyClipboard,SetClipboardData,CloseClipboard, 6_2_00007FF72D893E20
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D882D20 GetKeyState,SetFocus,PostMessageW,GetKeyState,GlobalAlloc,GlobalLock,GlobalUnlock,OpenClipboard,EmptyClipboard,SetClipboardData,CloseClipboard,GetKeyState,SendMessageW,#413,PostMessageW,GetKeyState,GlobalAlloc,GlobalLock,GlobalUnlock,OpenClipboard,EmptyClipboard,SetClipboardData,CloseClipboard,GetKeyState,SendMessageW,#413,#413, 6_2_00007FF72D882D20
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D883AB3 GetKeyState,SetFocus,GetKeyState,GlobalAlloc,GlobalLock,GlobalUnlock,OpenClipboard,EmptyClipboard,SetClipboardData,CloseClipboard,GetKeyState,SendMessageW,#413,GetKeyState,GlobalAlloc,GlobalLock,GlobalUnlock,OpenClipboard,EmptyClipboard,SetClipboardData,CloseClipboard,GetKeyState,SendMessageW,#413, 6_2_00007FF72D883AB3
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8D9910 GetAsyncKeyState,IsWindow,GetWindowTextW,GetDlgItem,IsWindow,GetWindowTextW,GetWindow,IsWindow,GetClassNameW,GetWindowTextW,GetWindow,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,GlobalUnlock,SetClipboardData,CloseClipboard, 6_2_00007FF72D8D9910
Contains functionality to retrieve information about pressed keystrokes
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AC280 GetAsyncKeyState,IsWindow,GetWindowTextW,GetDlgItem,IsWindow,GetWindowTextW,GetWindow,IsWindow,GetClassNameW,GetWindowTextW,GetWindow,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,GlobalUnlock,SetClipboardData,CloseClipboard, 4_2_00007FF61D3AC280
Contains functionality to call native functions
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B621F0 CreateMutexW,WaitForSingleObject,CreateEventW,CreateEventW,LoadLibraryW,GetProcAddress,GetCurrentProcess,NtQueryInformationProcess,GetCurrentProcess,SetPriorityClass,LoadCursorW,RegisterClassExW,CreateWindowExW,MessageBoxW,GetMessageW,TranslateMessage,DispatchMessageW,GetMessageW,SetEvent,GetCurrentThreadId,SendMessageW,CloseHandle,ReleaseMutex,MessageBoxW,SetEvent,GetCurrentThreadId,FreeLibrary,CloseHandle,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error, 5_2_00007FF714B621F0
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B61BC0 GetCurrentProcessId,ProcessIdToSessionId,GetForegroundWindow,GetWindowThreadProcessId,GetLastInputInfo,GetCurrentProcess,NtQueryInformationProcess,WaitForSingleObject,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error, 5_2_00007FF714B61BC0
Contains functionality to communicate with device drivers
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00587AAF: __EH_prolog,_wcslen,_wcslen,CreateFileW,CloseHandle,CreateDirectoryW,CreateFileW,DeviceIoControl,CloseHandle,GetLastError,RemoveDirectoryW,DeleteFileW, 0_2_00587AAF
Detected potential crypto function
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005892C6 0_2_005892C6
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00597DDC 0_2_00597DDC
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00595011 0_2_00595011
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00598253 0_2_00598253
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005902F7 0_2_005902F7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00595282 0_2_00595282
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A62A8 0_2_005A62A8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005913FD 0_2_005913FD
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0059742E 0_2_0059742E
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A64D7 0_2_005A64D7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005955B0 0_2_005955B0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005AE600 0_2_005AE600
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005907A7 0_2_005907A7
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0058D833 0_2_0058D833
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005988AF 0_2_005988AF
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0058395A 0_2_0058395A
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00584A8E 0_2_00584A8E
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005AEAAE 0_2_005AEAAE
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005B2BB4 0_2_005B2BB4
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0058FCCC 0_2_0058FCCC
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00582EB6 0_2_00582EB6
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D38EE50 4_2_00007FF61D38EE50
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D38FEF0 4_2_00007FF61D38FEF0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A1D90 4_2_00007FF61D3A1D90
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A7E20 4_2_00007FF61D3A7E20
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D38B050 4_2_00007FF61D38B050
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A7F40 4_2_00007FF61D3A7F40
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D386F5A 4_2_00007FF61D386F5A
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A0FC0 4_2_00007FF61D3A0FC0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D38EA90 4_2_00007FF61D38EA90
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A8A10 4_2_00007FF61D3A8A10
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D386C90 4_2_00007FF61D386C90
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39255A 4_2_00007FF61D39255A
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D390790 4_2_00007FF61D390790
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D38D810 4_2_00007FF61D38D810
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A8480 4_2_00007FF61D3A8480
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A04C0 4_2_00007FF61D3A04C0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3B7E84 4_2_00007FF61D3B7E84
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39CE8B 4_2_00007FF61D39CE8B
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39CEAB 4_2_00007FF61D39CEAB
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A9E40 4_2_00007FF61D3A9E40
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39CE5B 4_2_00007FF61D39CE5B
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39CE73 4_2_00007FF61D39CE73
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39CEE8 4_2_00007FF61D39CEE8
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3B6E24 4_2_00007FF61D3B6E24
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39CE31 4_2_00007FF61D39CE31
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A6DF0 4_2_00007FF61D3A6DF0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3BE0A8 4_2_00007FF61D3BE0A8
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C3FA0 4_2_00007FF61D3C3FA0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3B7010 4_2_00007FF61D3B7010
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C6A94 4_2_00007FF61D3C6A94
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C0AD4 4_2_00007FF61D3C0AD4
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C2948 4_2_00007FF61D3C2948
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3B6C38 4_2_00007FF61D3B6C38
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3ACC70 4_2_00007FF61D3ACC70
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AC690 4_2_00007FF61D3AC690
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A4590 4_2_00007FF61D3A4590
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3BE5A0 4_2_00007FF61D3BE5A0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A5540 4_2_00007FF61D3A5540
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C8898 4_2_00007FF61D3C8898
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C3920 4_2_00007FF61D3C3920
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D39748D 4_2_00007FF61D39748D
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AB440 4_2_00007FF61D3AB440
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C3470 4_2_00007FF61D3C3470
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C04C0 4_2_00007FF61D3C04C0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C633C 4_2_00007FF61D3C633C
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B621F0 5_2_00007FF714B621F0
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B6CE04 5_2_00007FF714B6CE04
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B74E0C 5_2_00007FF714B74E0C
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B6BDAC 5_2_00007FF714B6BDAC
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B6BF98 5_2_00007FF714B6BF98
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B6F060 5_2_00007FF714B6F060
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B70018 5_2_00007FF714B70018
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B72048 5_2_00007FF714B72048
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B74980 5_2_00007FF714B74980
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B6BBC0 5_2_00007FF714B6BBC0
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B79378 5_2_00007FF714B79378
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B70B48 5_2_00007FF714B70B48
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B704C8 5_2_00007FF714B704C8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88ED30 6_2_00007FF72D88ED30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D886100 6_2_00007FF72D886100
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88E010 6_2_00007FF72D88E010
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D819AA0 6_2_00007FF72D819AA0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87FB40 6_2_00007FF72D87FB40
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D889620 6_2_00007FF72D889620
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8978E0 6_2_00007FF72D8978E0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8A7450 6_2_00007FF72D8A7450
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87B350 6_2_00007FF72D87B350
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D888EA0 6_2_00007FF72D888EA0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8DBEA0 6_2_00007FF72D8DBEA0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D923EB0 6_2_00007FF72D923EB0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868EE1 6_2_00007FF72D868EE1
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D89DE30 6_2_00007FF72D89DE30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868E31 6_2_00007FF72D868E31
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D876E30 6_2_00007FF72D876E30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D890E60 6_2_00007FF72D890E60
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868E89 6_2_00007FF72D868E89
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D821E90 6_2_00007FF72D821E90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D884E90 6_2_00007FF72D884E90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8B6E80 6_2_00007FF72D8B6E80
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8C7DB0 6_2_00007FF72D8C7DB0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D861DB0 6_2_00007FF72D861DB0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91CDC8 6_2_00007FF72D91CDC8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8DDDA0 6_2_00007FF72D8DDDA0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D925DD0 6_2_00007FF72D925DD0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D85DDC0 6_2_00007FF72D85DDC0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8D0DF0 6_2_00007FF72D8D0DF0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868DD9 6_2_00007FF72D868DD9
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D870DE0 6_2_00007FF72D870DE0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D896D30 6_2_00007FF72D896D30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D81DD30 6_2_00007FF72D81DD30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8D9D20 6_2_00007FF72D8D9D20
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8E1D90 6_2_00007FF72D8E1D90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D863D90 6_2_00007FF72D863D90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868D81 6_2_00007FF72D868D81
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D81B0A0 6_2_00007FF72D81B0A0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D89E0D0 6_2_00007FF72D89E0D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8DD0D0 6_2_00007FF72D8DD0D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D85C100 6_2_00007FF72D85C100
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D934040 6_2_00007FF72D934040
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86E04F 6_2_00007FF72D86E04F
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86903E 6_2_00007FF72D86903E
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868040 6_2_00007FF72D868040
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8DE070 6_2_00007FF72D8DE070
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88C080 6_2_00007FF72D88C080
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91F06C 6_2_00007FF72D91F06C
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D893FB0 6_2_00007FF72D893FB0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8DCFB0 6_2_00007FF72D8DCFB0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D883FB0 6_2_00007FF72D883FB0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D866FA0 6_2_00007FF72D866FA0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D865FD0 6_2_00007FF72D865FD0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91CFB4 6_2_00007FF72D91CFB4
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868FE9 6_2_00007FF72D868FE9
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D83AFF0 6_2_00007FF72D83AFF0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868F39 6_2_00007FF72D868F39
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868F91 6_2_00007FF72D868F91
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D93DAC8 6_2_00007FF72D93DAC8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8EFA98 6_2_00007FF72D8EFA98
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D892AD0 6_2_00007FF72D892AD0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86BAC0 6_2_00007FF72D86BAC0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8C7AE0 6_2_00007FF72D8C7AE0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D860AE0 6_2_00007FF72D860AE0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8E0A30 6_2_00007FF72D8E0A30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D81CA30 6_2_00007FF72D81CA30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86BA63 6_2_00007FF72D86BA63
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8B7A80 6_2_00007FF72D8B7A80
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D9239B8 6_2_00007FF72D9239B8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86B9A9 6_2_00007FF72D86B9A9
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8439E0 6_2_00007FF72D8439E0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D895A10 6_2_00007FF72D895A10
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D874A10 6_2_00007FF72D874A10
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86BA06 6_2_00007FF72D86BA06
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D864A00 6_2_00007FF72D864A00
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88A920 6_2_00007FF72D88A920
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8E4920 6_2_00007FF72D8E4920
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86B94C 6_2_00007FF72D86B94C
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8CA960 6_2_00007FF72D8CA960
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D899990 6_2_00007FF72D899990
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8BC990 6_2_00007FF72D8BC990
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8ECCB0 6_2_00007FF72D8ECCB0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8D4CF0 6_2_00007FF72D8D4CF0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86AD13 6_2_00007FF72D86AD13
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D824D00 6_2_00007FF72D824D00
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D842C20 6_2_00007FF72D842C20
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D83BC60 6_2_00007FF72D83BC60
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D868C60 6_2_00007FF72D868C60
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D899C90 6_2_00007FF72D899C90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8C1C90 6_2_00007FF72D8C1C90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D92EBB8 6_2_00007FF72D92EBB8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D846BC0 6_2_00007FF72D846BC0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91CBE0 6_2_00007FF72D91CBE0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D814C00 6_2_00007FF72D814C00
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D891B30 6_2_00007FF72D891B30
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86BB1D 6_2_00007FF72D86BB1D
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D899B70 6_2_00007FF72D899B70
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D933B90 6_2_00007FF72D933B90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D85EB60 6_2_00007FF72D85EB60
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86BB77 6_2_00007FF72D86BB77
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D9346C0 6_2_00007FF72D9346C0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D89E6D0 6_2_00007FF72D89E6D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8406D0 6_2_00007FF72D8406D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D84E6D0 6_2_00007FF72D84E6D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86F6C0 6_2_00007FF72D86F6C0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8A26E0 6_2_00007FF72D8A26E0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8E4710 6_2_00007FF72D8E4710
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D872620 6_2_00007FF72D872620
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D81B660 6_2_00007FF72D81B660
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D932694 6_2_00007FF72D932694
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D813680 6_2_00007FF72D813680
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8215A0 6_2_00007FF72D8215A0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87C5D0 6_2_00007FF72D87C5D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D84E600 6_2_00007FF72D84E600
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8E1540 6_2_00007FF72D8E1540
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D81F560 6_2_00007FF72D81F560
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91D570 6_2_00007FF72D91D570
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D82E8A7 6_2_00007FF72D82E8A7
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D92E8D0 6_2_00007FF72D92E8D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D9388A8 6_2_00007FF72D9388A8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86B8EF 6_2_00007FF72D86B8EF
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D836910 6_2_00007FF72D836910
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D841830 6_2_00007FF72D841830
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88C850 6_2_00007FF72D88C850
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D931880 6_2_00007FF72D931880
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D86B892 6_2_00007FF72D86B892
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D857880 6_2_00007FF72D857880
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D869880 6_2_00007FF72D869880
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8767D0 6_2_00007FF72D8767D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8FC7BC 6_2_00007FF72D8FC7BC
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8387E0 6_2_00007FF72D8387E0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88E800 6_2_00007FF72D88E800
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D823800 6_2_00007FF72D823800
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D837800 6_2_00007FF72D837800
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D871800 6_2_00007FF72D871800
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D84A750 6_2_00007FF72D84A750
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D879760 6_2_00007FF72D879760
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D92D2B8 6_2_00007FF72D92D2B8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D82E220 6_2_00007FF72D82E220
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D939224 6_2_00007FF72D939224
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D860240 6_2_00007FF72D860240
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87E265 6_2_00007FF72D87E265
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D824290 6_2_00007FF72D824290
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8E01B0 6_2_00007FF72D8E01B0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87C1CB 6_2_00007FF72D87C1CB
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91D19C 6_2_00007FF72D91D19C
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8821F0 6_2_00007FF72D8821F0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8DA150 6_2_00007FF72D8DA150
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D84A150 6_2_00007FF72D84A150
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88B190 6_2_00007FF72D88B190
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8974A0 6_2_00007FF72D8974A0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D9394A0 6_2_00007FF72D9394A0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8914F0 6_2_00007FF72D8914F0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91F438 6_2_00007FF72D91F438
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91E418 6_2_00007FF72D91E418
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D88E490 6_2_00007FF72D88E490
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D82C480 6_2_00007FF72D82C480
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D865480 6_2_00007FF72D865480
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D9293BC 6_2_00007FF72D9293BC
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D81B3B0 6_2_00007FF72D81B3B0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8B7410 6_2_00007FF72D8B7410
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91133C 6_2_00007FF72D91133C
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D91D388 6_2_00007FF72D91D388
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87D380 6_2_00007FF72D87D380
Found potential string decryption / allocating functions
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D8A6E30 appears 100 times
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D885910 appears 46 times
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D916930 appears 48 times
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D8D6820 appears 38 times
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D9263B4 appears 34 times
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D816070 appears 89 times
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D89BE10 appears 37 times
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: String function: 00007FF72D89BC50 appears 45 times
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: String function: 00007FF61D3A23E0 appears 102 times
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: String function: 00007FF61D3A2850 appears 126 times
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: String function: 0059FEFC appears 42 times
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: String function: 005A07A0 appears 31 times
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: String function: 0059FFD0 appears 56 times
PE file contains executable resources (Code or Archives)
Source: pl_rsrc_bulgarian.dll.0.dr Static PE information: Resource name: RT_STRING type: COM executable for DOS
Source: pl_rsrc_french.dll.0.dr Static PE information: Resource name: RT_STRING type: PDP-11 demand-paged pure executable not stripped
Source: pl_rsrc_french.dll.0.dr Static PE information: Resource name: RT_STRING type: x86 executable (TV) not stripped
Source: pl_rsrc_french.dll.0.dr Static PE information: Resource name: RT_STRING type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.115
Source: pl_rsrc_german.dll.0.dr Static PE information: Resource name: RT_STRING type: DOS executable (COM, 0x8C-variant)
Source: pl_rsrc_italian.dll.0.dr Static PE information: Resource name: RT_STRING type: COM executable for DOS
Source: pl_rsrc_korean.dll.0.dr Static PE information: Resource name: RT_STRING type: COM executable for DOS
Source: pl_rsrc_russian.dll.0.dr Static PE information: Resource name: RT_STRING type: DOS executable (COM, 0x8C-variant)
Source: pl_rsrc_slovenian.dll.0.dr Static PE information: Resource name: RT_STRING type: VAX COFF pure executable, sections 78, created Sun Mar 29 05:32:17 1970, not stripped, version 110
Source: pl_rsrc_spanish.dll.0.dr Static PE information: Resource name: RT_STRING type: PDP-11 demand-paged pure executable not stripped
PE file does not import any functions
Source: pl_rsrc_korean.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_russian.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_english.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_spanish.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_french.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_chinese_traditional.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_german.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_polish.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_japanese.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_italian.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_slovenian.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_finnish.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_chinese.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_ptbr.dll.0.dr Static PE information: No import functions for PE file found
Source: pl_rsrc_bulgarian.dll.0.dr Static PE information: No import functions for PE file found
Sample file is different than original file name gathered from version info
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008165000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamevistammsc.exep( vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameprocesslasso.exe< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameprocesslassolauncher.exe< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenametestlasso.exe< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008114000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenametweaksch.exe> vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007E4C000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamequickupgrade.exe< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000086C8000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008075000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamethreadracer.exe8 vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenamepl_rsrc_english.dll< vs SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Uses 32bit PE files
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: classification engine Classification label: sus30.evad.winEXE@130/203@48/17
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_00587727 GetLastError,FormatMessageW, 0_2_00587727
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87FB40 GetTickCount64,GetSystemInfo,GetVersionExW,MessageBoxW,SetUnhandledExceptionFilter,InitializeCriticalSection,InitializeCriticalSection,CreateEventW,CreateEventW,CoInitializeEx,CoInitializeSecurity,InitCommonControlsEx,#17,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,OpenEventW,SetEvent,CloseHandle,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,RegCloseKey,GetSystemInfo,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,CreateEventW,SetEvent,CloseHandle,OpenProcess,WaitForSingleObject,CloseHandle,Sleep,EnterCriticalSection,LeaveCriticalSection,EnterCriticalSection,LeaveCriticalSection,EnterCriticalSection,GetCurrentDirectoryW,LeaveCriticalSection,EnterCriticalSection,GetCurrentDirectoryW,LeaveCriticalSection,LeaveCriticalSection,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,OpenProcess,Sleep,WaitForSingleObject,CloseHandle,FindWindowW,FindWindowW,PostMessageW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,ShellExecuteW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,GdiplusStartup,CreateEventW,LoadLibraryW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,SetProcessShutdownParameters,GetCommandLineW,CreateThread,WaitForSingleObject,DialogBoxParamW,DialogBoxParamW,DialogBoxParamW,DialogBoxParamW,DialogBoxParamW,MessageBoxW,ExitProcess,CreateThread,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,DialogBoxParamW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,GetModuleHandleW,LoadAcceleratorsW,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,GetActiveProcessorCount,GetModuleHandleW,LoadIconW,CreateEventW,SetEvent,WaitForSingleObject,TerminateThread,ResetEvent,CreateThread,CreateThread,CreateThread,CreateThread,OpenMutexW,OpenMutexW,CloseHandle,Sleep,CreateThread,CreateThread,CreateThread,GetFileAttributesW,PostMessageW,GetMessageW,TranslateAcceleratorW,TranslateMessage,DispatchMessageW,GetMessageW,CloseHandle,CloseHandle,SetEvent,Shell_NotifyIconW,Sleep,CreateEventW,SetEvent,WaitForSingleObject,TerminateThread,GdiplusShutdown,DeleteCriticalSection,CloseHandle,CloseHandle,CloseHandle,CloseHandle,CloseHandle,DeleteCriticalSection,SetEvent,WaitForSingleObject,TerminateThread,RegCloseKey,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW, 6_2_00007FF72D87FB40
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8EACE0 CreateToolhelp32Snapshot,Thread32First,GetCurrentProcessId,GetCurrentThreadId,OpenThread,SuspendThread,CloseHandle,Thread32Next,CloseHandle, 6_2_00007FF72D8EACE0
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D38EE50 CoInitializeEx,CoCreateInstance,VariantInit,VariantInit,VariantInit,VariantInit,VariantClear,VariantClear,VariantClear,VariantClear,CoUninitialize,SysAllocString,VariantClear,SysFreeString,SysFreeString,CoUninitialize, 4_2_00007FF61D38EE50
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0059B6D2 FindResourceW,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree, 0_2_0059B6D2
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A6DF0 OpenSCManagerW,OpenServiceW,QueryServiceConfigW,GetLastError,CloseServiceHandle,CloseServiceHandle,QueryServiceConfigW,ChangeServiceConfigW,NotifyBootConfigStatus,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle, 4_2_00007FF61D3A6DF0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\__tmp_rar_sfx_access_check_4832296 Jump to behavior
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Mutant created: \Sessions\1\BaseNamedObjects\Local\{878ec006-8bb7-4487-a9d9-6ab726fdad61}
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Command line argument: sfxname 0_2_0059F05C
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Command line argument: sfxstime 0_2_0059F05C
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Command line argument: p0\ 0_2_0059F05C
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Command line argument: STARTDLG 0_2_0059F05C
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File read: C:\Windows\win.ini Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe File read: C:\Windows\System32\drivers\etc\hosts Jump to behavior
Source: ProcessLasso.exe String found in binary or memory: /stopafter=
Source: ProcessLasso.exe String found in binary or memory: /stopafter=
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File read: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe "C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe"
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://%3cfnc1%3e(79)/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1896,i,18253400173548351382,657115916745803150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Process created: C:\Users\user\Desktop\PostUpdate.exe "C:\Users\user\Desktop\PostUpdate.exe"
Source: unknown Process created: C:\Users\user\Desktop\bitsumsessionagent.exe C:\Users\user\Desktop\bitsumsessionagent.exe ----------------------------------------------------------------
Source: C:\Users\user\Desktop\PostUpdate.exe Process created: C:\Users\user\Desktop\ProcessLasso.exe /postupdate
Source: unknown Process created: C:\Users\user\Desktop\bitsumsessionagent.exe C:\Users\user\Desktop\bitsumsessionagent.exe ----------------------------------------------------------------
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1804 --field-trial-handle=1720,i,12997719605534959893,6831416874331468599,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1992,i,4293187705668066289,15972859039918454721,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1964,i,13270427420856175794,1509384985464530,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1976,i,6968930643493135927,8005255390743799941,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1940 --field-trial-handle=1896,i,7178996704446796536,16546988757165640423,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1976,i,14095325021809620615,2370060676840329805,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1960,i,15884539196100534553,13935790719083973572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1972,i,7770318286161706758,8697429217068731838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1980,i,14311972056982275594,10984696189209996236,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1844,i,6611676962095983694,9654412610864421321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1980,i,3494391659014450711,15666856029738290658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2000,i,17513695124220267583,1691441907676113592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1976,i,5733970221364913042,4539587496349365289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,1855896387700206653,3917910617862819512,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1996,i,6687144587041723826,9523744997039119914,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Process created: C:\Users\user\Desktop\PostUpdate.exe "C:\Users\user\Desktop\PostUpdate.exe" Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1896,i,18253400173548351382,657115916745803150,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1964,i,13270427420856175794,1509384985464530,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Process created: C:\Users\user\Desktop\ProcessLasso.exe /postupdate Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1804 --field-trial-handle=1720,i,12997719605534959893,6831416874331468599,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1992,i,4293187705668066289,15972859039918454721,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1964,i,13270427420856175794,1509384985464530,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1976,i,6968930643493135927,8005255390743799941,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1940 --field-trial-handle=1896,i,7178996704446796536,16546988757165640423,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1976,i,14095325021809620615,2370060676840329805,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1960,i,15884539196100534553,13935790719083973572,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1972,i,7770318286161706758,8697429217068731838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1980,i,14311972056982275594,10984696189209996236,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1844,i,6611676962095983694,9654412610864421321,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1980,i,3494391659014450711,15666856029738290658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2000,i,17513695124220267583,1691441907676113592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1828 --field-trial-handle=1976,i,5733970221364913042,4539587496349365289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,1855896387700206653,3917910617862819512,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1996,i,6687144587041723826,9523744997039119914,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: <pi-ms-win-core-synch-l1-2-0.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: <pi-ms-win-core-synch-l1-2-0.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: <pi-ms-win-core-fibers-l1-1-1.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: <pi-ms-win-core-localization-l1-2-1.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: dxgidebug.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: sfc_os.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: riched20.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: usp10.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: msls31.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: windowscodecs.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: edputil.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: windows.staterepositoryps.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: appresolver.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: bcp47langs.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: slc.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: sppc.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: onecoreuapcommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: pcacli.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Section loaded: mpr.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: pl_rsrc_english.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: taskschd.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: xmllite.dll Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: pdh.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: dbghelp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: dbgcore.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: powrprof.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: umpdc.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: pl_rsrc_english.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: propsys.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: windows.shell.servicehostbuilder.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: onecoreuapcommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: windows.staterepositoryps.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: edputil.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: secur32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: mlang.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: policymanager.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: msvcp110_win.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: onecorecommonproxystub.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: ieframe.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: netapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Section loaded: wkscli.dll Jump to behavior
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32 Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe File written: C:\Users\user\AppData\Local\ProcessLasso\config\prolasso.ini Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: C:\Users\user\Desktop\ProcessLasso.exe Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\UrlAssociations Jump to behavior
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: certificate valid
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static file information: File size 2994544 > 1048576
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_korean.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009240000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_korean.dll.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_polish.pdb source: pl_rsrc_polish.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\LogViewer.pdb source: LogViewer.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_ptbr.pdb source: pl_rsrc_ptbr.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_french.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_bulgarian.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008165000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr
Source: Binary string: c:\pl\output\testlasso.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_japanese.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_japanese.dll.0.dr
Source: Binary string: c:\pl\output\PostUpdate.pdb source: PostUpdate.exe, 00000004.00000002.1727238245.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp, PostUpdate.exe, 00000004.00000000.1691618206.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_german.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese_traditional.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\QuickUpgrade.pdb$ source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, QuickUpgrade.exe.4.dr, QuickUpgrade.exe.Replacement.0.dr
Source: Binary string: c:\pl\output\InstallHelper.pdbi source: InstallHelper.exe.0.dr
Source: Binary string: c:\pl\output\PostUpdate.pdbZ source: PostUpdate.exe, 00000004.00000002.1727238245.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp, PostUpdate.exe, 00000004.00000000.1691618206.00007FF61D3D1000.00000002.00000001.01000000.0000000B.sdmp
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\Insights.pdb source: Insights.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_finnish.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_slovenian.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr
Source: Binary string: c:\pl\output\CPUEater.pdba source: CPUEater.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_italian.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_italian.dll.0.dr
Source: Binary string: c:\pl\output\vistammsc.exe.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008114000.00000004.00000020.00020000.00000000.sdmp, vistammsc.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_german.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008BAF000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_german.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\Insights.pdbd source: Insights.exe.0.dr
Source: Binary string: D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe
Source: Binary string: c:\pl\output\pl_rsrc_russian.pdbGCTL source: pl_rsrc_russian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\LogViewer.pdbJ source: LogViewer.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_french.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000089C5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_french.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.000000000825C000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese.dll.0.dr
Source: Binary string: c:\pl\output\ProcessLassoLauncher.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp, ProcessLassoLauncher.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_slovenian.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000079C6000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_slovenian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\QuickUpgrade.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007CDF000.00000004.00000020.00020000.00000000.sdmp, QuickUpgrade.exe.4.dr, QuickUpgrade.exe.Replacement.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_bulgarian.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008165000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_bulgarian.dll.0.dr
Source: Binary string: c:\pl\output\ProcessGovernor.pdbGCTL source: ProcessGovernor.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\x64\Release\bitsumsessionagent.pdb source: bitsumsessionagent.exe, 00000005.00000000.1725416053.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp, bitsumsessionagent.exe, 00000005.00000002.2874427195.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp, bitsumsessionagent.exe, 00000007.00000002.1757953890.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp, bitsumsessionagent.exe, 00000007.00000000.1752515463.00007FF714B7B000.00000002.00000001.01000000.0000000E.sdmp
Source: Binary string: c:\pl\output\pl_rsrc_finnish.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008897000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_finnish.dll.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_italian.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008DA5000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_italian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_chinese_traditional.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.00000000084FE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_chinese_traditional.dll.0.dr
Source: Binary string: c:\pl\output\CPUEater.pdb source: CPUEater.exe.0.dr
Source: Binary string: c:\pl\output\ThreadRacer.exe.pdbT source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp, ThreadRacer.exe.0.dr
Source: Binary string: c:\pl\output\ProcessGovernor.pdb source: ProcessGovernor.exe.0.dr
Source: Binary string: c:\pl\output\InstallHelper.pdb source: InstallHelper.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_russian.pdb source: pl_rsrc_russian.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_japanese.pdbGCTL source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000009054000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_japanese.dll.0.dr
Source: Binary string: c:\pl\output\vistammsc.exe.pdbY source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008114000.00000004.00000020.00020000.00000000.sdmp, vistammsc.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\pl_rsrc_spanish.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007BAE000.00000004.00000020.00020000.00000000.sdmp, pl_rsrc_spanish.dll.0.dr
Source: Binary string: c:\pl\output\ThreadRacer.exe.pdb source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000007F4B000.00000004.00000020.00020000.00000000.sdmp, ThreadRacer.exe.0.dr
Source: Binary string: c:\pl\output\pl_rsrc_ptbr.pdbGCTL source: pl_rsrc_ptbr.dll.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\ProcessLasso.pdb source: ProcessLasso.exe, 00000006.00000002.2875696270.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe, 00000006.00000000.1725605676.00007FF72D950000.00000002.00000001.01000000.0000000F.sdmp, ProcessLasso.exe.0.dr
Source: Binary string: C:\dev\projs\ProcessSupervisor\output\plActivate.pdb source: plActivate.exe.0.dr
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A74E0 LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryW, 4_2_00007FF61D3A74E0
File is packed with WinRar
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\__tmp_rar_sfx_access_check_4832296 Jump to behavior
PE file contains an invalid checksum
Source: plActivate.exe.0.dr Static PE information: real checksum: 0x4133d should be: 0x4133c
PE file contains sections with non-standard names
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Static PE information: section name: .didat
Source: ProcessLasso.exe.0.dr Static PE information: section name: _RDATA
Source: ProcessLassoLauncher.exe.0.dr Static PE information: section name: _RDATA
Source: testlasso.exe.0.dr Static PE information: section name: _RDATA
Source: ThreadRacer.exe.0.dr Static PE information: section name: _RDATA
Source: TweakScheduler.exe.0.dr Static PE information: section name: memcpy_
Source: TweakScheduler.exe.0.dr Static PE information: section name: _RDATA
Source: vistammsc.exe.0.dr Static PE information: section name: _RDATA
Source: bitsumsessionagent.exe.0.dr Static PE information: section name: _RDATA
Source: CPUEater.exe.0.dr Static PE information: section name: _RDATA
Source: Insights.exe.0.dr Static PE information: section name: _RDATA
Source: InstallHelper.exe.0.dr Static PE information: section name: _RDATA
Source: LogViewer.exe.0.dr Static PE information: section name: _RDATA
Source: plActivate.exe.0.dr Static PE information: section name: _RDATA
Source: PostUpdate.exe.0.dr Static PE information: section name: _RDATA
Source: ProcessGovernor.exe.0.dr Static PE information: section name: _RDATA
Source: QuickUpgrade.exe.Replacement.0.dr Static PE information: section name: _RDATA
Source: QuickUpgrade.exe.4.dr Static PE information: section name: _RDATA
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A07F0 push ecx; ret 0_2_005A0803
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0059FEFC push eax; ret 0_2_0059FF1A
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D857910 pushfq ; retf 6_2_00007FF72D857B4D
Drops PE files
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\testlasso.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_slovenian.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_italian.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_english.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\CPUEater.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_ptbr.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\TweakScheduler.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\vistammsc.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\QuickUpgrade.exe.Replacement Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\ProcessLasso.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\ProcessGovernor.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_japanese.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\Insights.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\bitsumsessionagent.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\PostUpdate.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_korean.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_bulgarian.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\ThreadRacer.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\ProcessLassoLauncher.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_french.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\InstallHelper.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_polish.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\LogViewer.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\plActivate.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_russian.dll Jump to dropped file
Source: C:\Users\user\Desktop\PostUpdate.exe File created: C:\Users\user\Desktop\QuickUpgrade.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_chinese.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_spanish.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_chinese_traditional.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_finnish.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\pl_rsrc_german.dll Jump to dropped file
Drops files with a non-matching file extension (content does not match file extension)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe File created: C:\Users\user\Desktop\QuickUpgrade.exe.Replacement Jump to dropped file
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A6FD0 OpenSCManagerW,OpenServiceW,QueryServiceStatus,StartServiceW,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle,CloseServiceHandle, 4_2_00007FF61D3A6FD0
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87DEC0 IsWindowVisible,ShowWindow,IsIconic,ShowWindow,SendMessageW,ShowWindow,SetForegroundWindow,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,RegCloseKey,ShowWindow, 6_2_00007FF72D87DEC0
Extensive use of GetProcAddress (often used to hide API calls)
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A74E0 LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryW, 4_2_00007FF61D3A74E0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8EACE0 CreateToolhelp32Snapshot,Thread32First,GetCurrentProcessId,GetCurrentThreadId,OpenThread,SuspendThread,CloseHandle,Thread32Next,CloseHandle, 6_2_00007FF72D8EACE0
Contains functionality to enumerate running services
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: OpenSCManagerW,EnumServicesStatusExW,GetLastError,EnumServicesStatusExW,CloseServiceHandle,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error,std::_Throw_Cpp_error, 6_2_00007FF72D8DBEA0
Found dropped PE file which has not been started or loaded
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_slovenian.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\testlasso.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_italian.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\CPUEater.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_ptbr.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\TweakScheduler.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\vistammsc.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\QuickUpgrade.exe.Replacement Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\ProcessGovernor.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_japanese.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\Insights.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_korean.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_bulgarian.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\ThreadRacer.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\ProcessLassoLauncher.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_french.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\InstallHelper.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_polish.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\LogViewer.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\plActivate.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_russian.dll Jump to dropped file
Source: C:\Users\user\Desktop\PostUpdate.exe Dropped PE file which has not been started: C:\Users\user\Desktop\QuickUpgrade.exe Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_chinese.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_spanish.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_chinese_traditional.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_finnish.dll Jump to dropped file
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Dropped PE file which has not been started: C:\Users\user\Desktop\pl_rsrc_german.dll Jump to dropped file
Found evasive API chain (date check)
Source: C:\Users\user\Desktop\ProcessLasso.exe Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes
Source: C:\Users\user\Desktop\PostUpdate.exe Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes
Found large amount of non-executed APIs
Source: C:\Users\user\Desktop\ProcessLasso.exe API coverage: 3.0 %
Uses the system / local time for branch decision (may execute only at specific dates)
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8352AA GetSystemTimeAsFileTime followed by cmp: cmp byte ptr [00007ff72d992c15h], 00000001h and CTI: jne 00007FF72D835952h 6_2_00007FF72D8352AA
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0058BA94 FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError, 0_2_0058BA94
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0059D420 SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SetDlgItemTextW,SendDlgItemMessageW,FindFirstFileW,_swprintf,SetDlgItemTextW,FindClose,_swprintf,SetDlgItemTextW,SendDlgItemMessageW,_swprintf,SetDlgItemTextW,_swprintf,SetDlgItemTextW, 0_2_0059D420
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3C6A94 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose, 4_2_00007FF61D3C6A94
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B72048 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose, 5_2_00007FF714B72048
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8C1C90 FindFirstFileW,GetFileAttributesW,FindNextFileW,_invalid_parameter_noinfo,DeleteFileW,DeleteFileW,RemoveDirectoryW,GetFileAttributesW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,FindFirstFileW,DeleteFileW,FindNextFileW,RemoveDirectoryW,GetFileAttributesW, 6_2_00007FF72D8C1C90
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0059F82F VirtualQuery,GetSystemInfo, 0_2_0059F82F
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: vmwareuser.exe>
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: vmtoolsd.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: vmware-vmx.exef
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000002.1695792756.000000000362E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000002.1695792756.000000000362E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}>
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe API call chain: ExitProcess graph end node
Source: C:\Users\user\Desktop\PostUpdate.exe API call chain: ExitProcess graph end node
Source: C:\Users\user\Desktop\ProcessLasso.exe API call chain: ExitProcess graph end node
Source: C:\Users\user\Desktop\ProcessLasso.exe API call chain: ExitProcess graph end node
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A0A0A IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 0_2_005A0A0A
Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AE5B8 InitializeCriticalSectionEx,GetLastError,IsDebuggerPresent,OutputDebugStringW, 4_2_00007FF61D3AE5B8
Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D8EACE0 CreateToolhelp32Snapshot,Thread32First,GetCurrentProcessId,GetCurrentThreadId,OpenThread,SuspendThread,CloseHandle,Thread32Next,CloseHandle, 6_2_00007FF72D8EACE0
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3A74E0 LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryW, 4_2_00007FF61D3A74E0
Contains functionality to read the PEB
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A91B0 mov eax, dword ptr fs:[00000030h] 0_2_005A91B0
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005AD1F0 GetProcessHeap, 0_2_005AD1F0
Enables debug privileges
Source: C:\Users\user\Desktop\ProcessLasso.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A0A0A IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 0_2_005A0A0A
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A0B9D SetUnhandledExceptionFilter, 0_2_005A0B9D
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A0D8A SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 0_2_005A0D8A
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A4FEF IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 0_2_005A4FEF
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3BA02C RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 4_2_00007FF61D3BA02C
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AFB2C IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 4_2_00007FF61D3AFB2C
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AFD10 SetUnhandledExceptionFilter, 4_2_00007FF61D3AFD10
Source: C:\Users\user\Desktop\PostUpdate.exe Code function: 4_2_00007FF61D3AF680 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 4_2_00007FF61D3AF680
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B6DD18 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 5_2_00007FF714B6DD18
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B63E40 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 5_2_00007FF714B63E40
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B64184 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 5_2_00007FF714B64184
Source: C:\Users\user\Desktop\bitsumsessionagent.exe Code function: 5_2_00007FF714B64368 SetUnhandledExceptionFilter, 5_2_00007FF714B64368
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87FB40 GetTickCount64,GetSystemInfo,GetVersionExW,MessageBoxW,SetUnhandledExceptionFilter,InitializeCriticalSection,InitializeCriticalSection,CreateEventW,CreateEventW,CoInitializeEx,CoInitializeSecurity,InitCommonControlsEx,#17,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,OpenEventW,SetEvent,CloseHandle,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,RegCloseKey,GetSystemInfo,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,RegCreateKeyExW,RegSetValueExW,RegCloseKey,CreateEventW,SetEvent,CloseHandle,OpenProcess,WaitForSingleObject,CloseHandle,Sleep,EnterCriticalSection,LeaveCriticalSection,EnterCriticalSection,LeaveCriticalSection,EnterCriticalSection,GetCurrentDirectoryW,LeaveCriticalSection,EnterCriticalSection,GetCurrentDirectoryW,LeaveCriticalSection,LeaveCriticalSection,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,OpenProcess,Sleep,WaitForSingleObject,CloseHandle,FindWindowW,FindWindowW,PostMessageW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,ShellExecuteW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,GdiplusStartup,CreateEventW,LoadLibraryW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,MessageBoxW,SetProcessShutdownParameters,GetCommandLineW,CreateThread,WaitForSingleObject,DialogBoxParamW,DialogBoxParamW,DialogBoxParamW,DialogBoxParamW,DialogBoxParamW,MessageBoxW,ExitProcess,CreateThread,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,DialogBoxParamW,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW,GetModuleHandleW,LoadAcceleratorsW,RegOpenKeyExW,RegQueryValueExW,RegCloseKey,GetActiveProcessorCount,GetModuleHandleW,LoadIconW,CreateEventW,SetEvent,WaitForSingleObject,TerminateThread,ResetEvent,CreateThread,CreateThread,CreateThread,CreateThread,OpenMutexW,OpenMutexW,CloseHandle,Sleep,CreateThread,CreateThread,CreateThread,GetFileAttributesW,PostMessageW,GetMessageW,TranslateAcceleratorW,TranslateMessage,DispatchMessageW,GetMessageW,CloseHandle,CloseHandle,SetEvent,Shell_NotifyIconW,Sleep,CreateEventW,SetEvent,WaitForSingleObject,TerminateThread,GdiplusShutdown,DeleteCriticalSection,CloseHandle,CloseHandle,CloseHandle,CloseHandle,CloseHandle,DeleteCriticalSection,SetEvent,WaitForSingleObject,TerminateThread,RegCloseKey,LoadStringW,LoadLibraryW,GetModuleHandleW,LoadStringW, 6_2_00007FF72D87FB40
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D920DF8 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 6_2_00007FF72D920DF8
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D915160 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 6_2_00007FF72D915160

HIPS / PFW / Operating System Protection Evasion
barindex
Found direct / indirect Syscall (likely to bypass EDR)
Source: C:\Users\user\Desktop\bitsumsessionagent.exe NtQueryInformationProcess: Indirect: 0x7FF714B61EA8 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe NtQuerySystemInformation: Indirect: 0x7FF72D8E3EB1 Jump to behavior
Source: C:\Users\user\Desktop\bitsumsessionagent.exe NtQueryInformationProcess: Indirect: 0x7FF714B623A9 Jump to behavior
Contains functionality to launch a program with higher privileges
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D890BB0 GetModuleHandleW,GetModuleFileNameW,ShellExecuteExW,GetStartupInfoW,CreateProcessW, 6_2_00007FF72D890BB0
Creates a process in suspended mode (likely to inject code)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Process created: C:\Users\user\Desktop\PostUpdate.exe "C:\Users\user\Desktop\PostUpdate.exe" Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://bitsum.com/get-lasso-pro/?discount=BITSUM25OFF&inproductcoupon=1 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D81FFB0 GetModuleHandleW,GetModuleFileNameW,InitializeSecurityDescriptor,SetSecurityDescriptorDacl,CreateEventW,SetEvent,GetFileAttributesW,GetFileAttributesW,CreateFileW,Sleep,CloseHandle, 6_2_00007FF72D81FFB0
Source: SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe, 00000000.00000003.1671915899.0000000008075000.00000004.00000020.00020000.00000000.sdmp, TweakScheduler.exe.0.dr Binary or memory string: tooltips_class32TweakScheduler v1.04System\CurrentControlSet\Control\PriorityControlWin32PrioritySeparationSeShutdownPrivilegehttps://bitsum.com/%xtweakscheduler.exelassopecparkbitsumalaInstallerLanguageDWORDBitsumSOFTWARE\%sInstallerLanguageLanguageSoftware\Bitsum%s\%s'''"""\,,Software\Microsoft\Windows\CurrentVersion\Run\processlasso.exe."%s" %d-%d%d;/%d/()allSYSTEM\CurrentControlSet\ServicesSYSTEM\CurrentControlSet\Services\DisplayNameImagePathObjectNameStartrunas"%s" "%s" "%s"SilentUpdate"%s"%s%sGlobal\TermSrvReadyEventTermServicesvchost.exe-k-Ksvchost.exe (%s)rundll32.exerundll32rundll32.exe (%s)%d:%02d:%02d.%03d"%s" %sCreateProcessWithTokenWadvapi32Progmanhttps\shell\open\command"%1"%1%s "%s"iexplore.exeprolasso.iniprosuper.iniprolasso.ini2ERROR: There was an error cleaning up the global path of Process Lasso's configuration file..portableservices.ex%s\ProcessLasso.exe%s\ProcessGovernor.exeSoftware\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted*systemlocal servicenetwork service\QuickUpgrade.exe.Replacement\ProcessLasso\pl4sfx.exe\pl4sfx_server.exe\pl_rsrc_temp.dll\pl_debug.logadvapi32.dllConvertStringSidToSidWS-1-16-1024PLError 1Error 2GUIStartCoreStartParkControlInstalledSanity check blockprocesslasso.exeInstall_Dirprobalance.exeSoftware\CPUBalancecpubalance\probalance.exeprocessgovernor.exeprocess lasso%s\%s\%s
Contains functionality to query CPU information (cpuid)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_005A0826 cpuid 0_2_005A0826
Contains functionality to query locales information (e.g. system language)
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: GetLocaleInfoW,GetNumberFormatW, 0_2_0059C093
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: EnumSystemLocalesW, 6_2_00007FF72D93D0AC
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: GetLocaleInfoW, 6_2_00007FF72D935FC4
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: EnumSystemLocalesW, 6_2_00007FF72D93CFDC
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: EnumSystemLocalesW, 6_2_00007FF72D935A28
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW, 6_2_00007FF72D93CC90
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: EnumSystemLocalesW,GetUserDefaultLCID,ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW, 6_2_00007FF72D93D6C4
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: GetLocaleInfoEx, 6_2_00007FF72D914864
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP, 6_2_00007FF72D93D4E8
Queries information about the installed CPU (vendor, model number etc)
Source: C:\Users\user\Desktop\PostUpdate.exe Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Jump to behavior
Source: C:\Users\user\Desktop\PostUpdate.exe Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Jump to behavior
Source: C:\Users\user\Desktop\ProcessLasso.exe Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0059F05C GetCommandLineW,OpenFileMappingW,MapViewOfFile,UnmapViewOfFile,CloseHandle,GetModuleFileNameW,SetEnvironmentVariableW,GetLocalTime,_swprintf,SetEnvironmentVariableW,GetModuleHandleW,LoadIconW,DialogBoxParamW,Sleep,DeleteObject,DeleteObject,CloseHandle, 0_2_0059F05C
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D87C5D0 InitializeCriticalSection,GetCurrentThread,SetThreadPriority,GetCurrentThread,SetThreadPriorityBoost,Sleep,GetUserNameW,OpenProcess,WaitForMultipleObjects,CloseHandle,ExitThread,PostMessageW,CloseHandle,OpenMutexW,OpenMutexW,PostMessageW,CloseHandle,Sleep,EnterCriticalSection,LeaveCriticalSection,DeleteCriticalSection,SysFreeString,Sleep,WaitForSingleObject,GetCommandLineW,CreateEventW,OpenEventW,WaitForMultipleObjects,CloseHandle,CloseHandle,PostMessageW, 6_2_00007FF72D87C5D0
Source: C:\Users\user\Desktop\ProcessLasso.exe Code function: 6_2_00007FF72D939224 _get_daylight,_get_daylight,_get_daylight,_get_daylight,_get_daylight,GetTimeZoneInformation, 6_2_00007FF72D939224
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe Code function: 0_2_0058C365 GetVersionExW, 0_2_0058C365
AV process strings found (often used to terminate AV products)
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: cmdagent.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: cfp.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: fsgk32.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: msmpeng.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: avkservice.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: mcshield.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: rtvscan.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: fsav32.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: ashwebsv.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: fsdfwd.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: vsmon.exe
Source: ProcessLasso.exe, 00000006.00000002.2874436459.0000021EFA2A9000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: ashmaisv.exe
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1432432 Sample: SecuriteInfo.com.Trojan.Mul... Startdate: 27/04/2024 Architecture: WINDOWS Score: 30 8 SecuriteInfo.com.Trojan.MulDrop27.345.18448.11434.exe 37 2->8         started        11 bitsumsessionagent.exe 2->11         started        14 chrome.exe 1 2->14         started        17 bitsumsessionagent.exe 2->17         started        dnsIp3 52 C:\Users\user\...\bitsumsessionagent.exe, PE32+ 8->52 dropped 54 C:\Users\user\Desktop\ProcessLasso.exe, PE32+ 8->54 dropped 56 C:\Users\user\Desktop\vistammsc.exe, PE32+ 8->56 dropped 58 27 other files (none is malicious) 8->58 dropped 19 PostUpdate.exe 21 53 8->19         started        72 Found direct / indirect Syscall (likely to bypass EDR) 11->72 66 192.168.2.4 unknown unknown 14->66 68 239.255.255.250 unknown Reserved 14->68 22 chrome.exe 14->22         started        file4 signatures5 process6 dnsIp7 50 C:\Users\user\Desktop\QuickUpgrade.exe, PE32+ 19->50 dropped 25 ProcessLasso.exe 1 34 19->25         started        60 dexeqbeb7giwr.cloudfront.net 18.164.116.33 MIT-GATEWAYSUS United States 22->60 62 stripe.com 198.137.150.141 LEVEL3US United States 22->62 64 20 other IPs or domains 22->64 file8 process9 signatures10 70 Found direct / indirect Syscall (likely to bypass EDR) 25->70 28 chrome.exe 25->28         started        30 chrome.exe 25->30         started        32 chrome.exe 25->32         started        34 12 other processes 25->34 process11 process12 36 chrome.exe 28->36         started        38 chrome.exe 30->38         started        40 chrome.exe 32->40         started        42 chrome.exe 34->42         started        44 chrome.exe 34->44         started        46 chrome.exe 34->46         started        48 9 other processes 34->48
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
151.101.0.176
 unknown United States
54113 FASTLYUS false
216.239.34.181
 analytics-alv.google.com United States
15169 GOOGLEUS false
142.251.40.228
 www.google.com United States
15169 GOOGLEUS false
104.26.5.102
 bitsum.com United States
13335 CLOUDFLARENETUS false
142.251.16.156
 stats.g.doubleclick.net United States
15169 GOOGLEUS false
216.239.38.181
 unknown United States
15169 GOOGLEUS false
198.137.150.141
 stripe.com United States
3356 LEVEL3US false
35.190.80.1
 a.nel.cloudflare.com United States
15169 GOOGLEUS false
44.238.18.217
 unknown United States
16509 AMAZON-02US false
192.0.76.3
 stats.wp.com United States
2635 AUTOMATTICUS false
44.240.201.86
 m.stripe.com United States
16509 AMAZON-02US false
44.237.125.219
 unknown United States
16509 AMAZON-02US false
239.255.255.250
 unknown Reserved
unknown unknown false
18.164.116.33
 dexeqbeb7giwr.cloudfront.net United States
3 MIT-GATEWAYSUS false
198.202.176.81
 unknown United States
22182 AS22182US false
151.101.192.176
 stripecdn.map.fastly.net United States
54113 FASTLYUS false

Private

IP
192.168.2.4

Contacted Domains

Name IP Active
stats.wp.com 192.0.76.3 true
google.com 142.250.80.46 true
a.nel.cloudflare.com 35.190.80.1 true
stripecdn.map.fastly.net 151.101.192.176 true
stats.g.doubleclick.net 142.251.16.156 true
bitsum.com 104.26.5.102 true
analytics-alv.google.com 216.239.34.181 true
pixel.wp.com 192.0.76.3 true
m.stripe.com 44.240.201.86 true
dexeqbeb7giwr.cloudfront.net 18.164.116.33 true
stripe.com 198.137.150.141 true
www.google.com 142.251.40.228 true
lb.wordpress.com 192.0.78.12 true
m.stripe.network unknown unknown
analytics.google.com unknown unknown
js.stripe.com unknown unknown
v0.wordpress.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178139063&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=3&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=view_item_list&_ee=1&pr1=pr4.95~lp1~id322~nmProcess%20Lasso%20Pro~capro%20version~va5&pr2=pr24.95~lp2~id322~nmProcess%20Lasso%20Pro~capro%20version~va4&pr3=pr39.95~lp3~id322~nmProcess%20Lasso%20Pro~capro%20version~va3&pr4=pr6.95~lp4~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va4&pr5=pr44.95~lp5~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va2&pr6=pr74.95~lp6~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va3&ep.forceSSL=true&ep.link_attribution=true&_et=248&tfd=2747 false
    		high
    https://bitsum.com/wp-content/plugins/google-analytics-premium/assets/js/frontend-gtag.min.js?ver=8.26.0 false
      		high
      https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178167090&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=1&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=page_view&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=2596 false
        		high
        https://bitsum.com/wp-content/plugins/tml-social/assets/styles/tml-social.min.css?ver=1.1 false
          		high
          https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178132170&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=1&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=page_view&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=1337 false
            		high
            https://m.stripe.network/inner.html#url=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&title=Get%20Process%20Lasso%20Pro&referrer=&muid=NA&sid=NA&version=6&preview=false false
              		high
              https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178132170&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&are=1&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pae=1&_eu=AAg&_s=2&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=get_lasso_pro&ep.forceSSL=true&ep.link_attribution=true&_et=3&tfd=3152 false
                		high
                https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178118368&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=3&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=view_item_list&_ee=1&pr1=pr4.95~lp1~id322~nmProcess%20Lasso%20Pro~capro%20version~va5&pr2=pr24.95~lp2~id322~nmProcess%20Lasso%20Pro~capro%20version~va4&pr3=pr39.95~lp3~id322~nmProcess%20Lasso%20Pro~capro%20version~va3&pr4=pr6.95~lp4~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va4&pr5=pr44.95~lp5~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va2&pr6=pr74.95~lp6~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va3&ep.forceSSL=true&ep.link_attribution=true&_et=3450&tfd=11765 false
                  		high
                  https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178181863&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=3&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=view_item_list&_ee=1&pr1=pr4.95~lp1~id322~nmProcess%20Lasso%20Pro~capro%20version~va5&pr2=pr24.95~lp2~id322~nmProcess%20Lasso%20Pro~capro%20version~va4&pr3=pr39.95~lp3~id322~nmProcess%20Lasso%20Pro~capro%20version~va3&pr4=pr6.95~lp4~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va4&pr5=pr44.95~lp5~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va2&pr6=pr74.95~lp6~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va3&ep.forceSSL=true&ep.link_attribution=true&tfd=3194 false
                    		high
                    https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178195136&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=1&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=page_view&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=2555 false
                      		high
                      https://bitsum.com/wp-content/plugins/theme-my-login/assets/scripts/theme-my-login.min.js?ver=7.1.7 false
                        		high
                        https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178160693&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=3&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=view_item_list&_ee=1&pr1=pr4.95~lp1~id322~nmProcess%20Lasso%20Pro~capro%20version~va5&pr2=pr24.95~lp2~id322~nmProcess%20Lasso%20Pro~capro%20version~va4&pr3=pr39.95~lp3~id322~nmProcess%20Lasso%20Pro~capro%20version~va3&pr4=pr6.95~lp4~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va4&pr5=pr44.95~lp5~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va2&pr6=pr74.95~lp6~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va3&ep.forceSSL=true&ep.link_attribution=true&tfd=3142 false
                          		high
                          https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178174662&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=3&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=view_item_list&_ee=1&pr1=pr4.95~lp1~id322~nmProcess%20Lasso%20Pro~capro%20version~va5&pr2=pr24.95~lp2~id322~nmProcess%20Lasso%20Pro~capro%20version~va4&pr3=pr39.95~lp3~id322~nmProcess%20Lasso%20Pro~capro%20version~va3&pr4=pr6.95~lp4~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va4&pr5=pr44.95~lp5~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va2&pr6=pr74.95~lp6~id853~nmProcess%20Lasso%20Pro%20Entire%20Home~caentire%20home~va3&ep.forceSSL=true&ep.link_attribution=true&tfd=2301 false
                            		high
                            https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178174662&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&are=1&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pae=1&_eu=AAg&_s=4&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=get_lasso_pro&ep.forceSSL=true&ep.link_attribution=true&tfd=9768 false
                              		high
                              https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178152977&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&are=1&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pae=1&_eu=AAg&_s=4&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=get_lasso_pro&ep.forceSSL=true&ep.link_attribution=true&_et=1&tfd=9393 false
                                		high
                                https://bitsum.com/wp-content/plugins/edd-user-history/assets/js/tracking.js?ver=1.2.0 false
                                  		high
                                  https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178207933&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=Ag&_s=1&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=page_view&_ee=1&ep.forceSSL=true&ep.link_attribution=true&tfd=2183 false
                                    		high
                                    https://pixel.wp.com/g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3385&rand=0.4022322553563107 false
                                      		high
                                      https://bitsum.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 false
                                        		high
                                        https://bitsum.com/wp-content/themes/meminz/skins/default/skin.css?ver=35eac6e98b37c7568cceeeeb456d12a3 false
                                          		high
                                          https://pixel.wp.com/g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=0&rand=0.5823933832413537 false
                                            		high
                                            https://bitsum.com/js/anchor-offset.js?ver=2 false
                                              		high
                                              https://bitsum.com/wp-content/themes/meminz/css/plugins.css?ver=20231028 false
                                                		high
                                                https://pixel.wp.com/g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=3020&rand=0.2054094452619757 false
                                                  		high
                                                  https://bitsum.com/wp-content/themes/meminz/js/custom.js?ver=20231102 false
                                                    		high
                                                    https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178132170&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&are=1&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pae=1&_eu=AAg&_s=4&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=get_lasso_pro&ep.forceSSL=true&ep.link_attribution=true&_et=5&tfd=8383 false
                                                      		high
                                                      https://pixel.wp.com/g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=2995&rand=0.5630717407710482 false
                                                        		high
                                                        https://analytics.google.com/g/collect?v=2&tid=G-ZV0D0J286B&gtm=45je44o0v890333677za200&_p=1714178200995&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dZGIzZG&cid=1877982582.1714178120&ul=en-us&sr=1280x1024&are=1&pscdl=noapi&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pae=1&_eu=AAg&_s=4&sid=1714178119&sct=1&seg=1&dl=https%3A%2F%2Fbitsum.com%2Fget-lasso-pro%2F%3Fdiscount%3DBITSUM25OFF%26inproductcoupon%3D1&dt=Get%20Process%20Lasso%20Pro&en=get_lasso_pro&ep.forceSSL=true&ep.link_attribution=true&_et=1&tfd=8910 false
                                                          		high
                                                          https://bitsum.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=7.6 false
                                                            		high
                                                            https://bitsum.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=7.6 false
                                                              		high
                                                              https://a.nel.cloudflare.com/report/v4?s=Juoae9xuv73uYDRAykdVqLksFMY0tv36o0qR022mZg3AWn8AsFejUkr%2FpPGRyMPxEu2CwZmndYF9p%2F0QR2kktlLaePpycMJb1XxGt3xG9ryMmoH93M2oeBkPEuc%3D false
                                                                		high
                                                                https://pixel.wp.com/g.gif?v=ext&blog=94535937&post=26649&tz=-4&srv=bitsum.com&j=1%3A13.3.1&host=bitsum.com&ref=&fcp=0&rand=0.9114243600301877 false
                                                                  		high
                                                                  https://bitsum.com/wp-content/themes/meminz/fonts/open-sans/opensans-regular-webfont.woff2 false
                                                                    		high
                                                                    https://bitsum.com/wp-content/plugins/edd-recurring/assets/css/styles.css?ver=2.12.3 false
                                                                      		high