Artifacts

https://censys.io/ipv4/154.16.138.89

domains:
maggmdggidggmaggmnggnnggnnggnkggjhgg.ijmlajom.tsworthoa.com
maggmdggidggmaggmnggnnggnnggnkggjhgg.ijmlajom.earlase.com
maggmdggidggmaggmnggnnggnnggnkggjhgg.ijmlajom.aximilian.com
IWf3lrRuM/8s76/2.tsworthoa.com
IWf3lrRuM/8s76/2.earlase.com
IWf3lrRuM/8s76/2.aximilian.com
FVfz2w889oBbk5MJ.tsworthoa.com
FVfz2w889oBbk5MJ.earlase.com
FVfz2w889oBbk5MJ.aximilian.com
bm7DQVP2FqWl7Ypa.tsworthoa.com
bm7DQVP2FqWl7Ypa.earlase.com
bm7DQVP2FqWl7Ypa.aximilian.com
y6B0L+JZZZDNCpa+.tsworthoa.com
y6B0L+JZZZDNCpa+.earlase.com
y6B0L+JZZZDNCpa+.aximilian.com
NZ+QA7zX0kemBJC7.tsworthoa.com
NZ+QA7zX0kemBJC7.earlase.com
NZ+QA7zX0kemBJC7.aximilian.com
60nlhQibWZLQj4yI.tsworthoa.com
60nlhQibWZLQj4yI.earlase.com
60nlhQibWZLQj4yI.aximilian.com
01-ucBkqwbUcndQr.tsworthoa.com
01-ucBkqwbUcndQr.earlase.com
01-ucBkqwbUcndQr.aximilian.com
zgqnB651z3jgFBZM.tsworthoa.com
zgqnB651z3jgFBZM.earlase.com
zgqnB651z3jgFBZM.aximilian.com
RzNSvAsjTNRfh-hn.tsworthoa.com
RzNSvAsjTNRfh-hn.earlase.com
RzNSvAsjTNRfh-hn.aximilian.com
KcCHP2fNswN-pCPn.tsworthoa.com
KcCHP2fNswN-pCPn.earlase.com
KcCHP2fNswN-pCPn.aximilian.com
JvNak6gmf++FDKSM.tsworthoa.com
JvNak6gmf++FDKSM.earlase.com
JvNak6gmf++FDKSM.aximilian.com
/I-ekZjQX3b-BY5d.tsworthoa.com
/I-ekZjQX3b-BY5d.earlase.com
/I-ekZjQX3b-BY5d.aximilian.com

in memory:
https://maggmhggnpggmcggnpggmeggmeggidggngggmjgg.ijmlajom.aximilian.com/3/28450-Nhim-Mauno-Yeopo-Bhoy-B
https://mhggmjggmjggmfggnlggmeggnkggmpggmeggmngg.ijmlajom.aximilian.com/0/20305-Ajhup-Owuuwa-Udi
https://maggmhggnpggmcggnpggmeggmeggidggngggmjgg.ijmlajom.aximilian.com/13/137308-Mefu-Yhev-Kav-Faole-Hiv-
https://maggmhggnpggmcggnpggmeggmeggidggngggmjgg.ijmlajom.aximilian.com/12/128669-Rov-Phaayi-Uy-

mutex:
34001c000c