Benign javascript Download

package/clob2.0.exe

Public Explr remote control serverExplr remote command server

SHA-256300a7dea05c2a588757010ad314fa55cb8ef3acebaa284f58a5cd0fd39bce478

MaleculeK(Li)O(C)H₁₀(Cm₁₆CrDb₁₄DsF₈Hf₂Os₅Po₅Ti₂U₈)Md₂(Bi₂)

Evidence

Winsock accept import 0x221fe0–0x2222d0

⋯29 more rows
0x2221b00d0a534d0d0a0d0af030224001000000..SM.....0"@....
0x2221c079000000000000006601000035000000y.......f...5...
0x2221d0f0302240010000007900000000000000.0"@....y.......
⋯16 more rows

Explr command execution module 0x22670e–0x22684e

⋯5 more rows
0x22675e524d787465726d2d323536636f6c6f72RMxterm-256color
0x22676e7372632d74617572695c7372635c636fsrc-tauri\src\co
0x22677e6d6d616e64735c636f6d6d616e645f65mmands\command_e
0x22678e7865635f636f6d6d616e64732e727300xec_commands.rs.
0x22679e436f6d6d616e6420697320656d707479Command is empty
⋯11 more rows

References the application/json media type 0x2b87dc–0x2b89cc

⋯4 more rows
0x2b881c786528632c793d7b7d297b636f6e7374xe(c,y={}){const
0x2b882c20723d61776169742066657463682822 r=await fetch("
0x2b883c2f6170692f696e766f6b65222c7b6d65/api/invoke",{me
0x2b884c74686f643a22504f5354222c68656164thod:"POST",head
0x2b885c6572733a7b22436f6e74656e742d5479ers:{"Content-Ty
0x2b886c7065223a226170706c69636174696f6epe":"application
0x2b887c2f6a736f6e222c2e2e2e4a7028297d2c/json",...Jp()},
0x2b888c626f64793a4a534f4e2e737472696e67body:JSON.string
0x2b889c696679287b636d643a632c617267733aify({cmd:c,args:
0x2b88ac797d297d292c683d617761697420722ey})}),h=await r.
⋯18 more rows

Explr SFTP operation verbs 0x2bd610–0x2bd730

⋯5 more rows
0x2bd660657475726e2061776169742078652822eturn await xe("
0x2bd67064656c6574655f66696c655f73667470delete_file_sftp
0x2bd680222c7b686f73743a4b2e636f6e6e6563",{host:K.connec
⋯11 more rows

Explr file operation verbs 0x2c00f9–0x2c0219

⋯5 more rows
0x2c01493b656c73657b61776169742078652822;else{await xe("
0x2c01596d6f76655f746f5f7472617368222c7bmove_to_trash",{
0x2c0169706174683a6b7d293b636f6e7374204epath:k});const N
⋯11 more rows