SecLens 情报中心

{
  "batch_id": "20260604065012",
  "domains": [],
  "file_paths": [
    {
      "file_name": "icsvcext.dll",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Microsoft\\Windows\\UPPS\\icsvcext.dll"
    }
  ],
  "hashes": [],
  "ips": [],
  "stats": {
    "new_domains": 0,
    "new_file_paths": 1,
    "new_hashes": 0,
    "new_ips": 0,
    "total_new": 1
  },
  "update_time": "2026-06-03T21:03:27.441000+00:00",
  "update_time_ms": 1780520607441
}

{
  "batch_id": "20260604055025",
  "domains": [
    {
      "value": "qweaap.icu"
    },
    {
      "value": "yvhphtmdwvmt.net"
    },
    {
      "value": "recdataoneveter.cc"
    }
  ],
  "file_paths": [
    {
      "file_name": "Paint.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Paint.exe"
    },
    {
      "file_name": "winieehi.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winieehi.exe"
    },
    {
      "file_name": "tmp2AAE.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp2AAE.tmp"
    },
    {
      "file_name": "owxyw.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\owxyw.exe"
    },
    {
      "file_name": "winuhadvh.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winuhadvh.exe"
    },
    {
      "file_name": "wecutil.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\wecutil.exe"
    },
    {
      "file_name": "oloxym.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\oloxym.exe"
    },
    {
      "file_name": "tmp1E1B.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp1E1B.tmp"
    },
    {
      "file_name": "winlawm.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winlawm.exe"
    },
    {
      "file_name": "winsoel.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winsoel.exe"
    },
    {
      "file_name": "winqtnoo.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winqtnoo.exe"
    },
    {
      "file_name": "xtbmpv.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\xtbmpv.exe"
    },
    {
      "file_name": "wintdls.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\wintdls.exe"
    },
    {
      "file_name": "winsgxrp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winsgxrp.exe"
    },
    {
      "file_name": "tmp66D.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp66D.tmp"
    },
    {
      "file_name": "winlejtp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winlejtp.exe"
    },
    {
      "file_name": "net.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\net.exe"
    },
    {
      "file_name": "tmp4B94.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp4B94.tmp"
    },
    {
      "file_name": "rnckrn.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\rnckrn.exe"
    },
    {
      "file_name": "rinv.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\rinv.exe"
    },
    {
      "file_name": "icsvcext.dll",
      "path": "C:\\Users\\Admin\\AppData\\Local\\Microsoft\\Windows\\UPPS\\icsvcext.dll"
    },
    {
      "file_name": "tmp7340.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp7340.tmp"
    },
    {
      "file_name": "winwulid.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winwulid.exe"
    },
    {
      "file_name": "tmp58E2.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp58E2.tmp"
    },
    {
      "file_name": "oulg.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\oulg.exe"
    },
    {
      "file_name": "bqtwdr.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\bqtwdr.exe"
    },
    {
      "file_name": "winknlh.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winknlh.exe"
    },
    {
      "file_name": "typeperf.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\typeperf.exe"
    },
    {
      "file_name": "tmp74F5.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp74F5.tmp"
    },
    {
      "file_name": "verclsid.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\verclsid.exe"
    },
    {
      "file_name": "tmpE24B.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmpE24B.tmp"
    },
    {
      "file_name": "winaqcg.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winaqcg.exe"
    },
    {
      "file_name": "winswqa.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winswqa.exe"
    },
    {
      "file_name": "winnqmpnh.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winnqmpnh.exe"
    },
    {
      "file_name": "InputSwitchToastHandler.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\InputSwitchToastHandler.exe"
    },
    {
      "file_name": "winsrlyxi.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winsrlyxi.exe"
    },
    {
      "file_name": "3kkeqsn1j18w.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\XYZABCDE\\3kkeqsn1j18w.tmp"
    },
    {
      "file_name": "winrcuhc.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winrcuhc.exe"
    },
    {
      "file_name": "winxqtdbj.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winxqtdbj.exe"
    },
    {
      "file_name": "winnbmly.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winnbmly.exe"
    },
    {
      "file_name": "netsh.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\netsh.exe"
    },
    {
      "file_name": "aspb.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\aspb.exe"
    },
    {
      "file_name": "winvskqc.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winvskqc.exe"
    },
    {
      "file_name": "DesktopLayer.exe",
      "path": "C:\\Program Files (x86)\\Microsoft\\DesktopLayer.exe"
    },
    {
      "file_name": "tmp4BE2.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp4BE2.tmp"
    },
    {
      "file_name": "Combo_52729650.exe",
      "path": "C:\\ProgramData\\Manten\\Combo_52729650.exe"
    },
    {
      "file_name": "winwosv.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winwosv.exe"
    }
  ],
  "hashes": [
    {
      "md5": null,
      "sha1": null,
      "sha256": "40937a89dfdee3ebe55917a801d399833cd1943904962ee56be7f823d94732f4"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3ae3e15b8b55f83d702e686a0bbd7c13c1684830cde4eeb90a36669f920ed98a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "01e3eae81b157722840ce4616c6978cc3e6ba94642498032e36712c5e53982b4"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "6ba9494d37a814e08fe1b102dbdf1fa7797e38b92810f7bcdbe176b8b0cac417"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "79613f5ea0dc406c7f8f72d4943860b1c69b31287e98e23547f098a400a6cf5e"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "be57b064edeb18b2ddd66097e89ee61e563107482769dcdcf5cc220b3d83214a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "8e9434ed8e0f08ad94d49fe0f482c34e3ba2183556bb66c5dcc94dcee9e6cd21"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "d56990f71a46b4de6a83151d425c9684f5d51dabffb494cb4fabd64a6323c130"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "36e089d04f566b866925af2e120d48c9fd5ecaa5245204bfb96914966af073fc"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "fcd848e99670cef7a51bf0386be83b58c00d7a6586acfabe334bbf03f6b08dda"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3da5d2be709886e9471ad0d383f0e11ecab27b4cad64b5d66295e35f679143b9"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "487b05cf51dbb11cee298ea02b6340dd88c95aab4d8829669b2efd00744a8115"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "750c76d801281c8129556c188bc83180d97369b446f29b1677dc6539f642f117"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "e5c5873347fc6bcd3f73c9908e0d71211e7f889ca118217482cc0b5d64626651"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "660a5494cc6232d4fec9b5e2a592cedc4d9cf5007feb5d209cc996a0f392c130"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "b6c470dfefa5b2a790fd93533be78d226846db31ab8c51a04610e6d553e9d316"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "490f027c658e0609b266360ba1e8bae2191da93e05bf11c04e0b2311cf3dfd27"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "dbcfdf7a243f0f33f8ca50927738bd380607fafef248879360c0fbf52a0d9209"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "0541980d6dce0bc093a95497348ec206efab98f248e8508ae4361e1af982f61f"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "f8e250362ada375fbaeb0970ae8f8106816130611d90ea3eb707f5f31bdfb90a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "e3cb70f83edd290419cd5db20322f6dc3305e364c47e8f2fdb1a12daac662a3a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "565c8d1496ecf75c79736bcf86725f455b4c3498ff2b360bc39afa941a956266"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "ba46f420a51c21ced4a9d3088426888e9266f8a16ca087405d6f6c7801b24050"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "833d78df4af2c9c058219f7ec03df614ef2cbf1d1f54ae76f1e6737c79b2ac02"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "b2970a91be73b144ccb6b1d298b02693e69fc0198a0f52fac37d0bc5bbd7fc97"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "75626543dcce6a384e79373081a48e2a0375810a7d676b97fb16b238114035c6"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3606c7f375a4fe6721aeb2f90241510383bc8d09e7667b7760812bc2a53a7a85"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "b112d6d2fa2f3330bfe15a5692eb01f3038e5b96571c9a32626e8f2a67c4734f"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3abc086320a3a0f7b9121024aa64330ce4530a5e57a8fb3efb2bdca4e70b760d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "cab58605080deda1ee16b980a2894300afb3fb0ffa25852700d7f5153b7b2b6d"
    }
  ],
  "ips": [
    {
      "value": "185.203.39.134"
    },
    {
      "value": "43.99.56.192"
    },
    {
      "value": "31.57.65.118"
    },
    {
      "value": "8.218.252.45"
    },
    {
      "value": "27.124.44.140"
    }
  ],
  "stats": {
    "new_domains": 3,
    "new_file_paths": 47,
    "new_hashes": 30,
    "new_ips": 5,
    "total_new": 85
  },
  "update_time": "2026-06-03T21:03:27.441000+00:00",
  "update_time_ms": 1780520607441
}

{
  "batch_id": "20260603065010",
  "domains": [],
  "file_paths": [
    {
      "file_name": "MRINFO.EXE",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\MRINFO.EXE"
    }
  ],
  "hashes": [],
  "ips": [
    {
      "value": "185.203.39.50"
    }
  ],
  "stats": {
    "new_domains": 0,
    "new_file_paths": 1,
    "new_hashes": 0,
    "new_ips": 1,
    "total_new": 2
  },
  "update_time": "2026-06-02T21:02:24.951000+00:00",
  "update_time_ms": 1780434144951
}

{
  "batch_id": "20260603055021",
  "domains": [
    {
      "value": "symptomatic.quest"
    },
    {
      "value": "www.damaix9k.com"
    }
  ],
  "file_paths": [
    {
      "file_name": "e903.tmp",
      "path": "c:\\users\\administrator\\appdata\\local\\temp\\e903.tmp"
    },
    {
      "file_name": "uwrfoe.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\uwrfoe.exe"
    },
    {
      "file_name": "is-TE1DR.tmp",
      "path": "C:\\dell\\Q8Y0Ta\\e3SvQ4\\fR9XsY\\JP2KD\\is-TE1DR.tmp"
    },
    {
      "file_name": "wingktrg.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\wingktrg.exe"
    },
    {
      "file_name": "flnuwe.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\flnuwe.exe"
    },
    {
      "file_name": "pvqd.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\pvqd.exe"
    },
    {
      "file_name": "qmjvs.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\qmjvs.exe"
    },
    {
      "file_name": "winummata.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winummata.exe"
    },
    {
      "file_name": "is-Q4QG8.tmp",
      "path": "C:\\msys64\\dASQ\\77Ka\\JCUasO\\is-Q4QG8.tmp"
    },
    {
      "file_name": "WaterMark.exe",
      "path": "C:\\Program Files (x86)\\Microsoft\\WaterMark.exe"
    },
    {
      "file_name": "tmp2D72.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp2D72.tmp"
    },
    {
      "file_name": "windbtgp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\windbtgp.exe"
    },
    {
      "file_name": "oemhr.exe",
      "path": "C:\\ProgramData\\oemhr.exe"
    },
    {
      "file_name": "winqymwq.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winqymwq.exe"
    },
    {
      "file_name": "xrey.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\xrey.exe"
    },
    {
      "file_name": "ogndi.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\ogndi.exe"
    },
    {
      "file_name": "MuiUnattend.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\MuiUnattend.exe"
    },
    {
      "file_name": "Internet Explorer.exe",
      "path": "C:\\Users\\Administrator\\Documents\\Adobe\\Google\\Internet Explorer.exe"
    },
    {
      "file_name": "tmp88B6.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp88B6.tmp"
    },
    {
      "file_name": "winhelp.ini",
      "path": "C:\\Windows\\winhelp.ini"
    },
    {
      "file_name": "!!!!zjlBUpmwKM .exe",
      "path": "c:\\!!!!zjlBUpmwKM .exe"
    },
    {
      "file_name": "uewfsh.exe",
      "path": "C:\\ProgramData\\uewfsh.exe"
    },
    {
      "file_name": "VGHyOkUQKnOBFio.zip",
      "path": "C:\\Users\\Public\\Documents\\VGHyOkUQKnOBFio.zip"
    },
    {
      "file_name": "winqwwqu.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winqwwqu.exe"
    },
    {
      "file_name": "winjatm.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winjatm.exe"
    },
    {
      "file_name": "winpgmoa.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winpgmoa.exe"
    },
    {
      "file_name": "tmp23FC.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp23FC.tmp"
    },
    {
      "file_name": "is-JAJ48.tmp",
      "path": "C:\\dell\\Q8Y0Ta\\e3SvQ4\\fR9XsY\\JP2KD\\is-JAJ48.tmp"
    },
    {
      "file_name": "!!!!yfrgTc .exe",
      "path": "c:\\!!!!yfrgTc .exe"
    },
    {
      "file_name": "winrbuy.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winrbuy.exe"
    },
    {
      "file_name": "winqqfj.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winqqfj.exe"
    },
    {
      "file_name": "VC_radist.x64.exe",
      "path": "C:\\ProgramData\\r962aG\\VC_radist.x64.exe"
    },
    {
      "file_name": "winrtfma.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winrtfma.exe"
    },
    {
      "file_name": "hsioal.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\hsioal.exe"
    },
    {
      "file_name": "Ground.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Ground.exe"
    },
    {
      "file_name": "nrmsun.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\nrmsun.exe"
    },
    {
      "file_name": "wintdwwlo.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\wintdwwlo.exe"
    },
    {
      "file_name": "windclv.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\windclv.exe"
    },
    {
      "file_name": "is-65V33.tmp",
      "path": "C:\\ProgramData\\JkW31Cc0\\SxETCQ\\is-65V33.tmp"
    },
    {
      "file_name": "is-G74AJG4PJN.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\is-G74AJG4PJN.tmp"
    },
    {
      "file_name": "supcu.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\supcu.exe"
    },
    {
      "file_name": "ea7773e.msi",
      "path": "C:\\Windows\\Installer\\ea7773e.msi"
    },
    {
      "file_name": "winorut.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winorut.exe"
    }
  ],
  "hashes": [
    {
      "md5": null,
      "sha1": null,
      "sha256": "f5411986560250d7a797b5cf9d56f0b44b767d9c376ff01f3cde6678a5029f9e"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "0941b796ea1bfef20161abbab36655973e8cd81084caccd30eca39503f02639a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3a9359929f8c225fbb8f5874108621424e7f4d6c2216ca70413c402c5244c845"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "79cfaff8ff943e595e4d80fdd28462c4742afa101d5d901936c0ea28bc523001"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "cf841c30e471306addff5a14d61eaa194cb4d4fd5ba8ffb0cafef41b4c01080a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "c8ae3144de29b71cb14c9d5fae6c44d6c8812f384bf1ec8d511d1287424a8e0d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "ce09a69d7e3d462af45b5c96a58213dddb0f3e19c85c33f4d0594a1fe63ce22d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "455a750612c4680a7421182b29414cbf3193dbee9f4f3fb5fd918db28a16ff7c"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "30beb3ce6f17996c95f3ccdaec6fa78131d0c24b4ddf918393567d1adbc1bc25"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "2ce126b25566e2ed42bf8084310c03c6acb12b7dc02fffea09976e05af676a87"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "a162a88a02b23fb69839faebe916b4fab8d106052313957d5301e74af602f8d2"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "818302490ea19ac1f82b272ee1785eeea4c0fe41aeece16b6de7fee012119bfc"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "8aa9fe0f14b784e943105d979801103174fb989c28cb4fcf5d92e093945ba123"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "06479469f25d5ebcf31ad8f52ec18621f5d1321cdbbd93066a01ba108a49b1d0"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "f3ecb8700cd569d2102a2502c1395f5246ddb063ee81987dba0c3a5fdd9d5434"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "f3f4ede47345d8f2ab60f8749905c52689629b2cf058dda9d0f5ea346a50c6bf"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "59aeafdbf225765bab3260666c176f7458e18fc62ff98016c4adcc67bab859b9"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "7027909a9e99369cc5178457919a71a9ec1f6b04c9c0b6ff04309ad0b31305e0"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "75ff62d9b0c59b7fef99b5125a4b3aaf95f63303d73f9665e6beec53d46f6622"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "cc5c9e2d64b3876101b0fcf39b9fd384b83c4d763f61455164b98d8589a4188f"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "decef02315a40ae4803ad0cd7fa5f4b643a9d6e41fa4d0a94ecf773eeb0ab892"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "265faade8840dffe414ff177391f1312e6a0090fa25092c0ffb141f958c21fb9"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "770280d3daf386839e54fd208b732d5f494c0af18b20d3b72fa70bf756b33b0d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "c2b08cb224c9d57d6d0a1433489b75190d3e4e909a2aea65bab6b73b080001be"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "349174b1b0f6bef631b0d6998323b9803dcfc3cff3d79607ad546590affd0e2f"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "446c51d0e726cdacbe1c6885a69a614cf5374d0d6d6680c59284a8943c861d0d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "ff4cd3eb4864451cd6aacc3c23dd171b9bd9192ecfec24b332f48fb40f7c4674"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "f2dd795bb569f1a7948c7d743a718cbd4840cda665d186151347f81768082a81"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "a307878d76b89a504c04efe8e13f3f17bf599f3285fd81dd1d94461d369cd109"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "76efcbef184a56676ceafdad77927185f7319fda8155e7e4699b7dac61d1190a"
    }
  ],
  "ips": [
    {
      "value": "134.122.133.45"
    },
    {
      "value": "192.252.181.96"
    },
    {
      "value": "47.237.105.38"
    },
    {
      "value": "13.208.73.208"
    },
    {
      "value": "137.220.136.168"
    },
    {
      "value": "15.197.64.127"
    }
  ],
  "stats": {
    "new_domains": 2,
    "new_file_paths": 43,
    "new_hashes": 30,
    "new_ips": 6,
    "total_new": 81
  },
  "update_time": "2026-06-02T21:02:24.951000+00:00",
  "update_time_ms": 1780434144951
}

{
  "batch_id": "20260602055023",
  "domains": [
    {
      "value": "fymomo.bing.hk.cn"
    },
    {
      "value": "mm.mcpklyd.com"
    },
    {
      "value": "knjghuig.biz"
    },
    {
      "value": "cvgrf.biz"
    },
    {
      "value": "npukfztj.biz"
    },
    {
      "value": "anpmnmxo.biz"
    }
  ],
  "file_paths": [
    {
      "file_name": "winejijn.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winejijn.exe"
    },
    {
      "file_name": "is-2Q0VH.tmp",
      "path": "C:\\inetpub\\lat\\R5Mkvimr\\is-2Q0VH.tmp"
    },
    {
      "file_name": "!!!!WFARQsxyBmNuR .exe",
      "path": "c:\\!!!!WFARQsxyBmNuR .exe"
    },
    {
      "file_name": "winptxrq.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winptxrq.exe"
    },
    {
      "file_name": "ceao.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\ceao.exe"
    },
    {
      "file_name": "winficx.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winficx.exe"
    },
    {
      "file_name": "TCPSVCS.EXE",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\TCPSVCS.EXE"
    },
    {
      "file_name": "winupkdn.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winupkdn.exe"
    },
    {
      "file_name": "ndadmin.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\ndadmin.exe"
    },
    {
      "file_name": "winfnjsk.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winfnjsk.exe"
    },
    {
      "file_name": "winoadm.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winoadm.exe"
    },
    {
      "file_name": "sjne.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\sjne.exe"
    },
    {
      "file_name": "winuiyvb.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winuiyvb.exe"
    },
    {
      "file_name": "edpnotify.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\edpnotify.exe"
    },
    {
      "file_name": "is-LKFIC.tmp",
      "path": "C:\\inetpub\\lat\\R5Mkvimr\\is-LKFIC.tmp"
    },
    {
      "file_name": "tmp18D0.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp18D0.tmp"
    },
    {
      "file_name": "winwijufo.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winwijufo.exe"
    },
    {
      "file_name": "nmln.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\nmln.exe"
    },
    {
      "file_name": "tmp4520.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp4520.tmp"
    },
    {
      "file_name": "windnymag.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\windnymag.exe"
    },
    {
      "file_name": "nlfer.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\nlfer.exe"
    },
    {
      "file_name": "winjvibk.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winjvibk.exe"
    },
    {
      "file_name": "@AE90E.tmp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\1043D946_Rar\\@AE90E.tmp.exe"
    },
    {
      "file_name": "winhbppfl.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winhbppfl.exe"
    },
    {
      "file_name": "ltgenp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\ltgenp.exe"
    },
    {
      "file_name": "tmpF3E3.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmpF3E3.tmp"
    },
    {
      "file_name": "RdpSa.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\RdpSa.exe"
    },
    {
      "file_name": "wingvlu.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\wingvlu.exe"
    },
    {
      "file_name": "winubnbcr.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winubnbcr.exe"
    },
    {
      "file_name": "cpavc.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\cpavc.exe"
    },
    {
      "file_name": "xvrtsh.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\xvrtsh.exe"
    },
    {
      "file_name": "winmsceu.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winmsceu.exe"
    },
    {
      "file_name": "vaxokt.exe",
      "path": "C:\\ProgramData\\vaxokt.exe"
    },
    {
      "file_name": "winkxmg.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winkxmg.exe"
    },
    {
      "file_name": "tmp9321.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp9321.tmp"
    },
    {
      "file_name": "systray.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\systray.exe"
    },
    {
      "file_name": "Updates.exe",
      "path": "D:\\Updates.exe"
    },
    {
      "file_name": "@AE90E.tmp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\1043F3A9_Rar\\@AE90E.tmp.exe"
    },
    {
      "file_name": "winsstsi.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winsstsi.exe"
    },
    {
      "file_name": "winomtjp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winomtjp.exe"
    },
    {
      "file_name": "maquu.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\maquu.exe"
    },
    {
      "file_name": "tmp3A0F.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp3A0F.tmp"
    },
    {
      "file_name": "ghqeso.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\ghqeso.exe"
    },
    {
      "file_name": "UxEnhance64.dll",
      "path": "C:\\Users\\Public\\maB4yS\\UxEnhance64.dll"
    },
    {
      "file_name": "tmp8163.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp8163.tmp"
    },
    {
      "file_name": "wmukuf.exe",
      "path": "C:\\ProgramData\\wmukuf.exe"
    },
    {
      "file_name": "anpq.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\anpq.exe"
    },
    {
      "file_name": "ounjhc.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\ounjhc.exe"
    },
    {
      "file_name": "winolmt.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winolmt.exe"
    },
    {
      "file_name": "winwcfjii.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\winwcfjii.exe"
    },
    {
      "file_name": "fwxudf.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\fwxudf.exe"
    },
    {
      "file_name": "kpkwat.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\kpkwat.exe"
    }
  ],
  "hashes": [
    {
      "md5": null,
      "sha1": null,
      "sha256": "b8c2703705b500befaedc4901b5be23474cbca7940624ab8512419d4aea61a56"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "4526ba009c4191dc724276b4c4293551e2a6865db6bf2e1e01e497f0d63130b6"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "c603975b4d51f9f44b4037a3137d3e4cb5fffda9b0366be59c625bcd82d4375d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "437ec4416097063fc910d8b21dbfb0a74d160a62cc70b6540c46cc995f284945"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "bdc424249a3083a067ed729360faf2aac79663078cdcb1a843c336e0bc4cf79e"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "e95571665a003304909c571fbb3340e7a9163aea187b826468d46d39aaaa4970"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "8892bd310c265fb59a1d4e747e57001960ee9ecc504b8520d549a3d50a299e5f"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "2dba245a9a21007cd461f08461cdf9f479e051b9b486e689181af97e876eda3d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "c86f2748212b93df1edec203994e2438e57ceab379925b0c1c74135c78ddad4b"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3fd3914e5d6cfebc3b4436600b767b064dd5c15d4934c3501d993d9afbf91f50"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "73535e8eaa6536992510713a1530a72b6503a6da6ad5ebe432803a11a6182825"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "c7735fbf5314b871e634fd2b5382360c342e55eddc86b5d25191de10d15d0624"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "874c4ceddba78679f018869fdd33281496da300552a287dd119dec32650a2173"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "df3f9ad9b1a6a097f11dd986a686485ebab422e68eee2265107822692170c177"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3cf15aab2dd28a83edb36596553354447884c374f6402176a67b948bd475b537"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "1825da7b60e1d96fe3fef2fa6cec79849dce98e4c12a3aa04b88a3f65b565726"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "b3e942f4e00f9a492617ff1367b82f6200d38a133bd36946d62d576bb448b47f"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "a7ecfe6bf413bf043ebfb2817f439b11e7f8e1e5a7df9fb3b4633ebea64b1889"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "b2b1a6b580d9b775c2c8c075b3e9c9e437ba64c13e65214548f076882bae1c9d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "d24dafb66d7555c36dd565cb51d6dbdc30cc082fc0de83fad7def1cb6af2e41e"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "78c22cf3ef232b75d10304c1b493eda1ce804041d3009e742900e094d7e70a98"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "7c30f33aa12108db23c3fcaf0836b355f53b560728dc8bd6a719fe7a0457e5ac"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "40f5d6f7d18f57f44148361fe40b630f51728089948c98e8a668ced473f72207"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "336f39b3a3bb1a36259c994496e826b28df862b949e74241dfe77bc65e7951e3"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "735e6977f4367a8917b38307d43bc37c22e49e9f30568259f1f1ef98642110f9"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "d56867554012ff1dbff99de2d1646f006db083396179f5128152eda36d598c7b"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "6f8db0a12874364e1d3998f480119f02ab9e44cb903774ee128d69ebbd52012c"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "0f26890f5c424cced0f3d83e7b93416451be6b7c281b214665956866238113fd"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "12b73dfc4b0d557dc3b9097734792a851fc1fccd2c33b50a8384ad6cae140695"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "95eecd77b0f32116fcdd6d1b544abf112620072847491c5cd4e2ec22b306517d"
    }
  ],
  "ips": [
    {
      "value": "134.122.173.137"
    },
    {
      "value": "55.33.22.11"
    },
    {
      "value": "23.249.28.75"
    },
    {
      "value": "178.16.54.109"
    },
    {
      "value": "27.18.154.117"
    },
    {
      "value": "192.238.134.233"
    },
    {
      "value": "45.192.208.50"
    }
  ],
  "stats": {
    "new_domains": 6,
    "new_file_paths": 52,
    "new_hashes": 30,
    "new_ips": 7,
    "total_new": 95
  },
  "update_time": "2026-06-01T21:04:04.767000+00:00",
  "update_time_ms": 1780347844767
}

{
  "batch_id": "20260601065009",
  "domains": [],
  "file_paths": [
    {
      "file_name": "AmvsYNDzdEEcrRd.zip",
      "path": "C:\\Users\\Public\\Documents\\AmvsYNDzdEEcrRd.zip"
    },
    {
      "file_name": "bitsadmin.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\bitsadmin.exe"
    }
  ],
  "hashes": [],
  "ips": [],
  "stats": {
    "new_domains": 0,
    "new_file_paths": 2,
    "new_hashes": 0,
    "new_ips": 0,
    "total_new": 2
  },
  "update_time": "2026-05-31T21:01:31.799000+00:00",
  "update_time_ms": 1780261291799
}

{
  "batch_id": "20260601055022",
  "domains": [
    {
      "value": "qweaat.icu"
    },
    {
      "value": "qexylup.com"
    },
    {
      "value": "qekykev.com"
    },
    {
      "value": "qexyryl.com"
    }
  ],
  "file_paths": [
    {
      "file_name": "VERSION.dll",
      "path": "C:\\ProgramData\\Microsoft\\WindowsDiagTrack\\VERSION.dll"
    },
    {
      "file_name": "WinTeleSvc.exe",
      "path": "C:\\ProgramData\\Microsoft\\WindowsDiagTrack\\WinTeleSvc.exe"
    },
    {
      "file_name": "Utility.dll",
      "path": "C:\\Program Files (x86)\\汽水音乐\\汽水音乐\\Utility.dll"
    },
    {
      "file_name": "EDACoreDll.dll",
      "path": "C:\\ProgramData\\970JCN8w\\EDACoreDll.dll"
    },
    {
      "file_name": "ea77318.msi",
      "path": "C:\\Windows\\Installer\\ea77318.msi"
    },
    {
      "file_name": "tmp793B.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp793B.tmp"
    },
    {
      "file_name": "2026052336汽水音乐1.cab",
      "path": "C:\\Users\\Admin\\AppData\\Roaming\\汽水音乐\\汽水音乐 7.1.3\\install\\2026052336汽水音乐1.cab"
    },
    {
      "file_name": "tmp105F.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp105F.tmp"
    },
    {
      "file_name": "is-J4NB4U5K2Y.tmp",
      "path": "C:\\Drivers\\xc1ISG\\OnJ1cV\\xvHtmX\\B1D3z\\is-J4NB4U5K2Y.tmp"
    },
    {
      "file_name": "tmpF083.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmpF083.tmp"
    },
    {
      "file_name": "EduWebContainer.dll",
      "path": "C:\\iratnt\\EduWebContainer.dll"
    },
    {
      "file_name": "udthhoycdkcatvbu.tmp",
      "path": "c:\\users\\administrator\\appdata\\local\\temp\\udthhoycdkcatvbu.tmp"
    },
    {
      "file_name": "newdev.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\newdev.exe"
    },
    {
      "file_name": "164ipnew-安装.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\164ipnew-安装.exe"
    },
    {
      "file_name": "Utility.dll",
      "path": "C:\\Program Files (x86)\\系统更新\\系统更新\\Utility.dll"
    },
    {
      "file_name": "tmp2B0C.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp2B0C.tmp"
    },
    {
      "file_name": "is-L1NBP.tmp",
      "path": "C:\\Drivers\\8kOHs\\kxtuf\\4Pna\\UHOR\\is-L1NBP.tmp"
    },
    {
      "file_name": "t6d.tmp",
      "path": "C:\\Program Files (x86)\\T3j0fAB\\t6d.tmp"
    },
    {
      "file_name": "NewLxsUoBaOZ.exe",
      "path": "C:\\Program Files (x86)\\DriveLeadLinux\\NewLxsUoBaOZ.exe"
    },
    {
      "file_name": "Snegee.ini",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Snegee.ini"
    },
    {
      "file_name": "mdexuq.dll",
      "path": "C:\\Program Files (x86)\\T3j0fAB\\mdexuq.dll"
    },
    {
      "file_name": "d5f.tmp",
      "path": "c:\\users\\administrator\\appdata\\local\\temp\\d5f.tmp"
    },
    {
      "file_name": "b63b.tmp",
      "path": "c:\\users\\administrator\\appdata\\local\\temp\\b63b.tmp"
    },
    {
      "file_name": "t6d.tmp",
      "path": "C:\\Program Files (x86)\\oCvIlG\\t6d.tmp"
    },
    {
      "file_name": "tmp5B91.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp5B91.tmp"
    },
    {
      "file_name": "is-C4B8N.tmp",
      "path": "C:\\Drivers\\8kOHs\\kxtuf\\4Pna\\UHOR\\is-C4B8N.tmp"
    },
    {
      "file_name": "RunCode.exe",
      "path": "C:\\Users\\Public\\Documents\\RunCode.exe"
    },
    {
      "file_name": "Config.json",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Config.json"
    },
    {
      "file_name": "c89.tmp",
      "path": "c:\\users\\administrator\\appdata\\local\\temp\\c89.tmp"
    },
    {
      "file_name": "tmp133E.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp133E.tmp"
    },
    {
      "file_name": "2026052336汽水音乐1.cab",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\汽水音乐\\汽水音乐 7.1.3\\install\\2026052336汽水音乐1.cab"
    },
    {
      "file_name": "chrmstp.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\chrmstp.exe"
    },
    {
      "file_name": "EduWebContainer.dll",
      "path": "C:\\arztow\\EduWebContainer.dll"
    },
    {
      "file_name": "bmiga.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\bmiga.exe"
    },
    {
      "file_name": "pcaui.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\pcaui.exe"
    },
    {
      "file_name": "is-DKO21.tmp",
      "path": "C:\\Drivers\\8kOHs\\kxtuf\\4Pna\\UHOR\\is-DKO21.tmp"
    },
    {
      "file_name": "Clash.Verge_.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\Clash.Verge_.exe"
    },
    {
      "file_name": "Config2.json",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Config2.json"
    },
    {
      "file_name": "TapiUnattend.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\TapiUnattend.exe"
    },
    {
      "file_name": "powrprof.dll",
      "path": "C:\\Windows\\powrprof.dll"
    },
    {
      "file_name": "tmp30D8.tmp",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\tmp30D8.tmp"
    },
    {
      "file_name": "LXrnrlmd.exe",
      "path": "D:\\LXrnrlmd.exe"
    },
    {
      "file_name": "Cndom6.sys",
      "path": "C:\\Users\\Public\\Documents\\x86-Microsoft-Windowsdata\\Cndom6.sys"
    },
    {
      "file_name": "2026052336-单妈妈1.cab",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\系统更新\\系统更新 7.1.3\\install\\2026052336-单妈妈1.cab"
    },
    {
      "file_name": "xiazai[1]",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\OKVYXXBW\\xiazai[1]"
    },
    {
      "file_name": "user.dat",
      "path": "C:\\Program Files (x86)\\系统更新\\系统更新\\user.dat"
    },
    {
      "file_name": "user.dat",
      "path": "C:\\Program Files (x86)\\汽水音乐\\汽水音乐\\user.dat"
    },
    {
      "file_name": "intel.dll",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\TrustAsia\\intel.dll"
    },
    {
      "file_name": "Danma.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Local\\Temp\\Danma.exe"
    },
    {
      "file_name": "at.exe",
      "path": "C:\\Users\\Administrator\\AppData\\Roaming\\Microsoft\\Windows\\dllcache\\at.exe"
    }
  ],
  "hashes": [
    {
      "md5": null,
      "sha1": null,
      "sha256": "8803ca80c665e5a707ff4375b923bb8b7117002bcc3c063f318728b8fce53bec"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "6613ede41478ec5d4e7b4d5f04429b974c5f8f7fa4a46cf5d7e08bc67ee50389"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "f6d8958d282d83ae1d16390afc286550496685ba6e0292e3e3a9de117995efe2"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "7ca0fd68f220cb95b516ee20973be7b2b316c3f1cab137d624e7a6495eae51fd"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "d2499fc2e179eefd4bd5c5c77647b2dd3b9eeaf2a19c70fcf1139a9b57b0c59c"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "3855e08391122a482e8239338e6bba8b699107dddb691505998a35dd6365eb0a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "fd689f0af58ee07e606fb4f49046c602a61f2c06286522798200955fa2346a3d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "ec8970f8cb3ca437c131850152f421053d685231552b549437d14db9d63478ef"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "abeee53cc66fbd4000a0a5c6bc4d59b9c201c713e5300bc8bf21ed7eb325927b"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "a31a9fd3a80c139cfc76bde07544a78cb0f090ba764089c9c422ec19c35878d5"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "4eb51e65b5363f3d0e417eebb38bdbde5d15f5fd399cad7a8b013fcf49aa55d1"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "7d5af942ec4d87a0c772b3cd273cdc320b5206ee366fc118892b36376686db01"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "535a775ee740304eb064ba07f5cf6da2b1b0e6498921039165fff1b62ce6b41a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "a311766bcf9e3b65cb2ef0c9306b3661b839cb5dafa32b521affb097a08955b1"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "c0ce801c7efc3b3dde13776a397bea600b6774c69e21dfcc36142a4099e7a74d"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "bf52bcf384167354f4bfea7d7ee4f50789e576bf88869a66819a930783ba54c2"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "7898c83cb8231f5ead848bf7697b131cbcfb6a2139b56a5a68ee9198939a864a"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "ab8dd958b4907abb41d630d8237d8d3794c4f71c47ab55d150f9013cc62fa440"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "a2bd2e1ed40558a4aaf6c9454c639ecc4c30d76f2141b7d8424b368006940c0c"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "0e4d7fc19fc912a50e26ef99ca954613c480a3d05155bd23e3d78cf52ec0e90e"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "32eac5bd1ee48007dea357b077edfa51bf82c6cc1feb0a31a672ca839d1b1c38"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "f5355b8935993f67ba31cdd70f238392f98e4568acffa8d42395a30add4017b6"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "726a64fcc2aad0fbca72f9d3ffac54ef89bc90f70810eee6043297230c1a7aac"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "d08059799a87a46b24bf7e6fe4110799758f084b13f8379cb0785768d5b7c6d8"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "f9fe34ca477c56a56ea1584e97bd8df08c40cb43d52d2f7a587cf116633b2fe7"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "1d4594f0ab8045f725eba757285f8d34cd74df7a5dc2ea30636f7ecf611989b8"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "9f6ab1b15848ccf99ad67a7d89412522d52faf2dffba62274a06c9349f8dd674"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "bdc95c2e07e4cb5e3d9a4575b4e20f332732eee2a814977625ccfe39b67d9ac6"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "a48b15bfc2316ec24ec23412f2c4092001f33b0ef71a2c4a88b530ee38adc2c3"
    },
    {
      "md5": null,
      "sha1": null,
      "sha256": "dfce149ba208ec0b50ddda0c203410a7fadc5c3dae3b38bb6c03b21547988815"
    }
  ],
  "ips": [
    {
      "value": "23.249.20.51"
    },
    {
      "value": "23.249.20.45"
    },
    {
      "value": "118.107.0.147"
    },
    {
      "value": "38.47.213.156"
    },
    {
      "value": "161.248.86.8"
    },
    {
      "value": "54.46.75.246"
    },
    {
      "value": "192.252.181.103"
    },
    {
      "value": "38.181.23.51"
    }
  ],
  "stats": {
    "new_domains": 4,
    "new_file_paths": 50,
    "new_hashes": 30,
    "new_ips": 8,
    "total_new": 92
  },
  "update_time": "2026-05-31T21:01:31.799000+00:00",
  "update_time_ms": 1780261291799
}

{
  "batch_id": "20260530065022",
  "domains": [],
  "file_paths": [
    {
      "file_name": "StartMenuExperienceHostker.exe",
      "path": "C:\\Users\\Public\\Documents\\x86-Microsoft-Windowsdata\\StartMenuExperienceHostker.exe"
    },
    {
      "file_name": "log.dll",
      "path": "C:\\Users\\Public\\Documents\\x86-Microsoft-Windowsdata\\log.dll"
    }
  ],
  "hashes": [],
  "ips": [],
  "stats": {
    "new_domains": 0,
    "new_file_paths": 2,
    "new_hashes": 0,
    "new_ips": 0,
    "total_new": 2
  },
  "update_time": "2026-05-29T21:01:23.418000+00:00",
  "update_time_ms": 1780088483418
}