--- title: "PyPi Is Under Attack: Project Creation and User Registration Suspended" date: "2024-03-28T11:31:30+00:00" url: "https://staging.checkmarx.com/blog/pypi-is-under-attack-project-creation-and-user-registration-suspended/" description: "A few hours ago, The Python Package Index (PyPi) suspended new project creation and new user registration to mitigate an ongoing malware upload campaign. The research team of Checkmarx simultaneously investigated a campaign of multiple malicious packages appear to be related to the same threat actors." --- # PyPi Is Under Attack: Project Creation and User Registration Suspended A few hours ago, The Python Package Index (PyPi) suspended new project creation and new user registration to mitigate an ongoing malware upload campaign. The research team of Checkmarx simultaneously investigated a campaign of multiple malicious packages appear to be related to the same threat actors. The threat actors target victims with Typosquatting attack technique using their CLI to install Python packages. This is a multi-stage attack and the malicious payload aimed to steal crypto wallets, sensitive data from browsers (cookies, extensions data, etc..) and various credentials. In addition, the malicious payload employed a persistence mechanism to survive reboots. ## **PyPi Suspended User and Project Creation** A few hours ago, on Mar 28, 2024 – 02:16 UTC, The Python Package Index (PyPi) added a new website banner and [released an official update](https://status.python.org/incidents/dc9zsqzrs0bv): “We have temporarily suspended new project creation and new user registration to mitigate an ongoing malware upload campaign” ![](https://staging.checkmarx.com/wp-content/uploads/2024/03/image-15-1.png)## **Evidence of Multiple Malicious Typosquatting Packages** Between March 27 and March 28, 2024, multiple malicious Python packages were uploaded on the Python Package Index (PyPI). These packages most likely created using automation ![](https://staging.checkmarx.com/wp-content/uploads/2024/03/image-16-1.png)## **The Malicious Payload** The malicious code is located within each package’s setup.py file, enabling automatic execution upon installation. employed a technique where the setup.py file contained obfuscated code that was encrypted using the Fernet encryption module. When the package was installed, the obfuscated code was automatically executed, triggering the malicious payload. ![](https://staging.checkmarx.com/wp-content/uploads/2024/03/image-17-1.png)Upon execution, the malicious code within the setup.py file attempted to retrieve an additional payload from a remote server. The URL for the payload was dynamically constructed by appending the package name as a query parameter. ![](https://staging.checkmarx.com/wp-content/uploads/2024/03/image-18-1.png)The retrieved payload was also encrypted using the Fernet module, Once decrypted, the payload revealed an extensive info-stealer designed to harvest sensitive information from the victim’s machine. The malicious payload also employed a persistence mechanism to ensure it remained active on the compromised system even after the initial execution. ![](https://staging.checkmarx.com/wp-content/uploads/2024/03/image-19-1.png)*A small piece of the larger script* ## **Summary** The discovery of these malicious Python packages on PyPI highlights the ongoing nature of cybersecurity threats within the software development ecosystem. This incident is not an isolated case, and similar attacks targeting package repositories and software supply chains are likely to continue. As this situation unfolds, we will provide updates on any new developments. Working together to keep the open-source ecosystem safe. ## **Package List** package\_namedateeventrequiremetstx28/03/2024remove projectrequiremntstx28/03/2024remove projectrequirementstxxt28/03/2024remove projectrequiremetnstxt28/03/2024remove projectrequiirementstx28/03/2024remove projectrequirrementstxt28/03/2024remove projectrequirmentstx28/03/2024remove projectrequiremnetxtxt28/03/2024remove projectrequiremmentxt28/03/2024remove projectrequirment28/03/2024remove projectrequirementstx28/03/2024remove projectrequiremetstxt28/03/2024remove projectrequiirementstxt28/03/2024remove projectrequiremnets28/03/2024remove projectrequirments28/03/2024remove projectrequiements28/03/2024remove projectrequriments28/03/2024remove projectrequiurement28/03/2024remove projectreuirements28/03/2024remove projectrequiiremnts28/03/2024remove projectrequiremeents28/03/2024remove projectcstmotkinter28/03/2024remove projectcustomtkintre28/03/2024remove projectcustomtkinetr28/03/2024remove projectcustmtokinter28/03/2024remove projectcustomekinter28/03/2024remove projectcustomtkibter28/03/2024remove projectcustontkinter28/03/2024remove projectcustojtkinter28/03/2024remove projectcustojmtkinter28/03/2024remove projectcustumtkinter28/03/2024remove projectcustomtkinted28/03/2024remove projectcustomtkjnter28/03/2024remove projecttrnsorflow28/03/2024remove projecttensxoflow28/03/2024remove projecttensourflow28/03/2024remove projecttensogflow28/03/2024remove projecttensofpow28/03/2024remove projecttensoflxow28/03/2024remove projecttensoflw28/03/2024remove projecttensoflsw28/03/2024remove projecttensoflqw28/03/2024remove projecttensoflpw28/03/2024remove projecttensoflouw28/03/2024remove projecttensoflor28/03/2024remove projecttensoflonw28/03/2024remove projecttensoflomw28/03/2024remove projecttensoflom28/03/2024remove projecttensoflolw28/03/2024remove projecttensoflod28/03/2024remove projecttensofloaw28/03/2024remove projecttensofllow28/03/2024remove projecttensofliw28/03/2024remove projecttensofleow28/03/2024remove projecttensoflaow28/03/2024remove projecttensofla28/03/2024remove projecttensofl9w28/03/2024remove projecttensofklow28/03/2024remove projecttensobflow28/03/2024remove projecttensnflow28/03/2024remove projecttemsorflow28/03/2024remove projectSjmplejson28/03/2024remove projectSjimplejson28/03/2024remove projectSiplejason28/03/2024remove projectSimpoejson28/03/2024remove projectSimplejsoj28/03/2024remove projectSimplejsoh28/03/2024remove projectSimplejdon28/03/2024remove projectSimplejason28/03/2024remove projectSimpkejson28/03/2024remove projectSimpjson28/03/2024remove projectSimpejso28/03/2024remove projectSimolejson28/03/2024remove projectSimepljson28/03/2024remove projectSijplejson28/03/2024remove projectSijplejso28/03/2024remove projectselunium28/03/2024remove projectsellinium28/03/2024remove projectselleniumm28/03/2024remove projectsellenim28/03/2024remove projectselleniium28/03/2024remove projectselleium28/03/2024remove projectselinum28/03/2024remove projectseliniumn28/03/2024remove projectseliniumm28/03/2024remove projectseleunium28/03/2024remove projectselenyum28/03/2024remove projectselenuimm28/03/2024remove projectselennuim28/03/2024remove projectselenniumm28/03/2024remove projectselennim28/03/2024remove projectselenimn28/03/2024remove projectselemniumm28/03/2024remove projectselemnium28/03/2024remove projectselemnim28/03/2024remove projectselemni28/03/2024remove projectselemiumm28/03/2024remove projectseleiumm28/03/2024remove projectseleinuim28/03/2024remove projectseleiniumm28/03/2024remove projectseleinium28/03/2024remove projectseleeniumm28/03/2024remove projectseleenimu28/03/2024remove projectseleenim28/03/2024remove projectrequriements28/03/2024remove projectrequrementstxt28/03/2024remove projectrequiurementstxt28/03/2024remove projectrequirtements28/03/2024remove projectrequirmentstxtt28/03/2024remove projectrequirmentstxt28/03/2024remove projectrequirmentss28/03/2024remove projectrequirmeents28/03/2024remove projectrequiremtns28/03/2024remove projectrequiremntxtxt28/03/2024remove projectrequiremntstxt28/03/2024remove projectrequiremnts28/03/2024remove projectrequiremnetstxt28/03/2024remove projectrequiremmentxtxt28/03/2024remove projectrequiremmentstxt28/03/2024remove projectrequiremments28/03/2024remove projectrequiremetns28/03/2024remove projectrequirementxxt28/03/2024remove projectrequirementxtt28/03/2024remove projectrequirementxt28/03/2024remove projectrequirementxstxt28/03/2024remove projectrequirementtsxt28/03/2024remove projectrequirementt28/03/2024remove projectrequirementstxx28/03/2024remove projectrequirementstxtxt28/03/2024remove projectrequirementstxtx28/03/2024remove projectrequirementstxtt28/03/2024remove projectrequirementsttx28/03/2024remove projectrequirementstt28/03/2024remove projectrequirementst28/03/2024remove projectrequirementss28/03/2024remove projectrequiremenstxt28/03/2024remove projectrequiremenstx28/03/2024remove projectrequiremants28/03/2024remove projectrequiirments28/03/2024remove projectrequiiremments28/03/2024remove projectrequiirementsxt28/03/2024remove projectrequiirements28/03/2024remove projectrequierments28/03/2024remove projectrequierement28/03/2024remove projectreqiuremnets28/03/2024remove projectreqiurementstxt28/03/2024remove projectreqiurements28/03/2024remove projectreqiremnts28/03/2024remove projectreqiremnets28/03/2024remove projectreqirements28/03/2024remove projectPzTorch28/03/2024remove projectPzGame28/03/2024remove projectPyTrosh28/03/2024remove projectPyTroce28/03/2024remove projectPyTprch28/03/2024remove projectPyTorqh28/03/2024remove projectPyTordh28/03/2024remove projectPyTorcu28/03/2024remove projectPyTorcm28/03/2024remove projectPyTorchy28/03/2024remove projectPyTorchv28/03/2024remove projectPyTorchj28/03/2024remove projectPyTorchg28/03/2024remove projectPyTorchc28/03/2024remove projectPyTorchb28/03/2024remove projectPyTorcdh28/03/2024remove projectPyTorcb28/03/2024remove projectPyTorbch28/03/2024remove projectPyToich28/03/2024remove projectPyTlrc28/03/2024remove projectPyTirch28/03/2024remove projectPyThrch28/03/2024remove projectPyTcrch28/03/2024remove projectPyTbrch28/03/2024remove projectPyTarch28/03/2024remove projectPyGzme28/03/2024remove projectPyGxme28/03/2024remove projectPyGvame28/03/2024remove projectPyGume28/03/2024remove projectPyGqme28/03/2024remove projectPyGqame28/03/2024remove projectPyGmme28/03/2024remove projectPyGhame28/03/2024remove projectPyGfme28/03/2024remove projectPyGfame28/03/2024remove projectPyGazme28/03/2024remove projectPyGawme28/03/2024remove projectPyGarme28/03/2024remove projectPyGaqme28/03/2024remove projectPyGaome28/03/2024remove projectPyGane28/03/2024remove projectPyGamw28/03/2024remove projectPyGamse28/03/2024remove projectPyGamr28/03/2024remove projectPyGamne28/03/2024remove projectPygamm28/03/2024remove projectPyGamke28/03/2024remove projectPyGaime28/03/2024remove projectPyGaeme28/03/2024remove projectPyGacme28/03/2024remove projectPtTorch28/03/2024remove projectPqTorch28/03/2024remove projectplywright28/03/2024remove projectplyawright28/03/2024remove projectplaywritgh28/03/2024remove projectplaywrihgt28/03/2024remove projectplaywrigth28/03/2024remove projectplaywrightt28/03/2024remove projectplaywrigh28/03/2024remove projectplaywrigght28/03/2024remove projectplaywrgith28/03/2024remove projectplaywrgiht28/03/2024remove projectplaywrght28/03/2024remove projectplaywirght28/03/2024remove projectplayrwight28/03/2024remove projectplawyright28/03/2024remove projectplawwright28/03/2024remove projectplauwright28/03/2024remove projectplaawright28/03/2024remove projectMatplutlib28/03/2024remove projectMatplttlib28/03/2024remove projectMatpltotlib28/03/2024remove projectMatplrtlib28/03/2024remove projectMatplrtib28/03/2024remove projectMatplptlib28/03/2024remove projectMatplotvlib28/03/2024remove projectMatplotvib28/03/2024remove projectMatplottlab28/03/2024remove projectMatplottib28/03/2024remove projectMatplottbib28/03/2024remove projectMatplotpib28/03/2024remove projectMatplotoib28/03/2024remove projectMatplotlyib28/03/2024remove projectMatplotlub28/03/2024remove projectMatplotltib28/03/2024remove projectMatplotlr28/03/2024remove projectMatplotlpib28/03/2024remove projectMatplotlob28/03/2024remove projectMatplotllib28/03/2024remove projectMatplotlig28/03/2024remove projectMatplotlbib28/03/2024remove projectMatplotklib28/03/2024remove projectMatplotkib28/03/2024remove projectMatplotib28/03/2024remove projectMatplotblib28/03/2024remove projectMatplorlib28/03/2024remove projectMatploptlib28/03/2024remove projectMatplootib28/03/2024remove projectMatploltlib28/03/2024remove projectMatploltlab28/03/2024remove projectMatplolplib28/03/2024remove projectMatpllotib28/03/2024remove projectMatpllotb28/03/2024remove projectMatplkotlib28/03/2024remove projectMatpliotlib28/03/2024remove projectMatplftlib28/03/2024remove projectMaptplotlib28/03/2024remove projectcuxtomtkinter28/03/2024remove projectcuwtomtkinter28/03/2024remove projectcutomtkinter28/03/2024remove projectcustvomtkinter28/03/2024remove projectcustrmtkinter28/03/2024remove projectcustpmtkinter28/03/2024remove projectcustoumtkinter28/03/2024remove projectcustotminter28/03/2024remove projectcustotkminter28/03/2024remove projectcustotkinter28/03/2024remove projectcustotinter28/03/2024remove projectcustoqtkinter28/03/2024remove projectcustomtkznter28/03/2024remove projectcustomtkwnter28/03/2024remove projectcustomtknter28/03/2024remove projectcustomtknster28/03/2024remove projectcustomtkniterr28/03/2024remove projectcustomtkniter28/03/2024remove projectcustomtkknter28/03/2024remove projectcustomtkiyter28/03/2024remove projectcustomtkitnre28/03/2024remove projectcustomtkitnerr28/03/2024remove projectcustomtkitner28/03/2024remove projectcustomtkiter28/03/2024remove projectcustomtkitenr28/03/2024remove projectcustomtkinyer28/03/2024remove projectcustomtkintwr28/03/2024remove projectcustomtkintrr28/03/2024remove projectcustomtkintrer28/03/2024remove projectcustomtkintet28/03/2024remove projectcustomtkintert28/03/2024remove projectcustomtkinteer28/03/2024remove projectcustomtkinte28/03/2024remove projectcustomtkintar28/03/2024remove projectcustomtkinrer28/03/2024remove projectcustomtkingter28/03/2024remove projectcustomtkinger28/03/2024remove projectcustomtkinet28/03/2024remove projectcustomtkinber28/03/2024remove projectcustomtkimter28/03/2024remove projectcustomtkihter28/03/2024remove projectcustomtkfnter28/03/2024remove projectcustomtjinter28/03/2024remove projectcustomtinter28/03/2024remove projectcustomtiknter28/03/2024remove projectcustomtikinter28/03/2024remove projectcustomkinter28/03/2024remove projectcustoktkinter28/03/2024remove projectcustohtkinter28/03/2024remove projectcustogtkinter28/03/2024remove projectcustmtkinter28/03/2024remove projectBeutifulSoop28/03/2024remove projectBeutifullSoup28/03/2024remove projectBeuatiflSoup28/03/2024remove projectBeautySoup28/03/2024remove projectBeautyfulSoup28/03/2024remove projectBeautilfulSoup28/03/2024remove projectBeautifuoSoup28/03/2024remove projectBeautifulSoupo28/03/2024remove projectBeautifulSoupe28/03/2024remove projectBeautifulSoul28/03/2024remove projectBeautifulSoop28/03/2024remove projectBeautifullSooup28/03/2024remove projectBeautifullSoop28/03/2024remove projectBeautifukSoup28/03/2024remove projectBeautifuklSoup28/03/2024remove projectBeautifoulSoup28/03/2024remove projectBeautifolSoup28/03/2024remove projectBeautiflulSoup28/03/2024remove projectBeautiflulSoop28/03/2024remove projectBeautifilSoup28/03/2024remove projectBeautifilSoop28/03/2024remove projectBeaurifulSoup28/03/2024remove projectBeaufifulSoup28/03/2024remove projectBeaotifulSoup28/03/2024remove projectBeaitifulSoup28/03/2024remove projectBeaitifulSoop28/03/2024remove projectaysncio28/03/2024remove projectasyyncio28/03/2024remove projectasynncio28/03/2024remove projectasynio28/03/2024remove projectasyncioo28/03/2024remove projectasyncioi28/03/2024remove projectasynciio28/03/2024remove projectasyncii28/03/2024remove projectasynci28/03/2024remove projectasynccio28/03/2024remove projectasyncci28/03/2024remove projectasyincio28/03/2024remove projectassyncio28/03/2024remove projectaasyncio28/03/2024remove projectreqzests27/03/2024remove projectrequzsts27/03/2024remove projectrequyests27/03/2024remove projectrequxsts27/03/2024remove projectrequstss27/03/2024remove projectrequssts27/03/2024remove projectrequnests27/03/2024remove projectrequksts27/03/2024remove projectrequewsts27/03/2024remove projectrequetsts27/03/2024remove projectrequetsq27/03/2024remove projectrequetsa27/03/2024remove projectrequesxts27/03/2024remove projectrequesxt27/03/2024remove projectrequesxs27/03/2024remove projectrequesuts27/03/2024remove projectrequestr27/03/2024remove projectrequesrts27/03/2024remove projectrequesqs27/03/2024remove projectrequesks27/03/2024remove projectrequesgt27/03/2024remove projectrequeqsts27/03/2024remove projectrequekts27/03/2024remove projectrequeksts27/03/2024remove projectrequeits27/03/2024remove projectrequas27/03/2024remove projectreqsests27/03/2024remove projectreqquest27/03/2024remove projectreqoests27/03/2024remove projectreqjuests27/03/2024remove projectreqeyst27/03/2024remove projectreqeustz27/03/2024remove projectreqeustx27/03/2024remove projectreqeuste27/03/2024remove projectreqeosts27/03/2024remove projectreqeist27/03/2024remove projectpycordwd27/03/2024remove projectpycordde27/03/2024remove projectpycjrd27/03/2024remove projectpy-xord27/03/2024remove projectpy-vord27/03/2024remove projectpy-czrd27/03/2024remove projectpy-cyrd27/03/2024remove projectpy-cxrd27/03/2024remove projectpy-cwrd27/03/2024remove projectpy-crodd27/03/2024remove projectpy-crd27/03/2024remove projectpy-cprd27/03/2024remove projectpy-cpord27/03/2024remove projectpy-cozd27/03/2024remove projectpy-cowrd27/03/2024remove projectpy-cotrd27/03/2024remove projectpy-cotd27/03/2024remove projectpy-corxd27/03/2024remove projectpy-corx27/03/2024remove projectpy-corwd27/03/2024remove projectpy-cortd27/03/2024remove projectpy-corrd27/03/2024remove projectpy-corid27/03/2024remove projectpy-corg27/03/2024remove projectpy-corfd27/03/2024remove projectpy-corf27/03/2024remove projectpy-cordx27/03/2024remove projectpy-cordw27/03/2024remove projectpy-cordv27/03/2024remove projectpy-cordr27/03/2024remove projectpy-cordq27/03/2024remove projectpy-cordf27/03/2024remove projectpy-corde27/03/2024remove projectpy-corddd27/03/2024remove projectpy-cordd27/03/2024remove projectpy-corad27/03/2024remove projectpy-coqrd27/03/2024remove projectpy-coordd27/03/2024remove projectpy-cojrd27/03/2024remove projectpy-coird27/03/2024remove projectpy-cofrd27/03/2024remove projectpy-cofd27/03/2024remove projectpy-coerd27/03/2024remove projectpy-coed27/03/2024remove projectpy-codrd27/03/2024remove projectpy-cod27/03/2024remove projectpy-cocd27/03/2024remove projectpy-cobrd27/03/2024remove projectpy-coad27/03/2024remove projectpy-co4d27/03/2024remove projectpy-ckrd27/03/2024remove projectpy-ckord27/03/2024remove projectpy-cird27/03/2024remove projectpy-cdord27/03/2024remove projectpy-c9rd27/03/2024remove projectpy-c0red27/03/2024remove projectpy-c0dd27/03/2024remove projectpy-c0crd27/03/2024remove projectpy-c0ard27/03/2024remove projectpullow27/03/2024remove projectpollow27/03/2024remove projectpjllow27/03/2024remove projectpirlow27/03/2024remove projectpiplow27/03/2024remove projectpiolow27/03/2024remove projectpilpow27/03/2024remove projectpillox27/03/2024remove projectpilloq27/03/2024remove projectpilloo27/03/2024remove projectpilloa27/03/2024remove projectpillo227/03/2024remove projectpillkw27/03/2024remove projectpilliw27/03/2024remove projectpilliow27/03/2024remove projectpill9w27/03/2024remove projectpilkow27/03/2024remove projectcorlorama27/03/2024remove projectcolprama27/03/2024remove projectcolouorama27/03/2024remove projectcolorramma27/03/2024remove projectcolorram27/03/2024remove projectcoloroama27/03/2024remove projectcolormma27/03/2024remove projectcolorm27/03/2024remove projectcolorhrama27/03/2024remove projectcolorayma27/03/2024remove projectcoloramzs27/03/2024remove projectcoloramza27/03/2024remove projectcoloramxs27/03/2024remove projectcoloramxa27/03/2024remove projectcoloramws27/03/2024remove projectcoloramwa27/03/2024remove projectcoloramu27/03/2024remove projectcoloramqs27/03/2024remove projectcoloramqa27/03/2024remove projectcoloramoo27/03/2024remove projectcoloramo27/03/2024remove projectcoloramna27/03/2024remove projectcoloramka27/03/2024remove projectcoloramia27/03/2024remove projectcolorame27/03/2024remove projectcoloramaz27/03/2024remove projectcoloramal27/03/2024remove projectcoloramah27/03/2024remove projectcoloramae27/03/2024remove projectcolorahma27/03/2024remove projectcolomara27/03/2024remove projectcolaroma27/03/2024remove projectcloroma27/03/2024remove projectclolorama27/03/2024remove projectcilorama27/03/2024remove projectcapmostercloudclinet27/03/2024remove projectcapmostercloudclient27/03/2024remove projectcapmostercloudclienet27/03/2024remove projectcapmostercloudclieent27/03/2024remove projectcapmosterclouclient27/03/2024remove projectcapmonsterrcloudclient27/03/2024remove projectcapmonstercouldclient27/03/2024remove projectcapmonstercoudclient27/03/2024remove projectcapmonstercludclient27/03/2024remove projectcapmonsterclouudclient27/03/2024remove projectcapmonsterclouidclient27/03/2024remove projectcapmonsterclouddlient27/03/2024remove projectcapmonsterclouddclient27/03/2024remove projectcapmonstercloudcluodclient27/03/2024remove projectcapmonstercloudclouidclient27/03/2024remove projectcapmonstercloudclinet27/03/2024remove projectcapmonstercloudclinent27/03/2024remove projectcapmonstercloudcliient27/03/2024remove projectcapmonstercloudcliet27/03/2024remove projectcapmonstercloudclientt27/03/2024remove projectcapmonstercloudcliennt27/03/2024remove projectcapmonstercloudclienet27/03/2024remove projectcapmonstercloudcliendt27/03/2024remove projectcapmonstercloudcliend27/03/2024remove projectcapmonstercloudclien27/03/2024remove projectcapmonstercloudclieet27/03/2024remove projectcapmonstercloudclieent27/03/2024remove projectcapmonstercloudcliant27/03/2024remove projectcapmonstercloudclent27/03/2024remove projectcapmonstercloudclenit27/03/2024remove projectcapmonstercloudclenet27/03/2024remove projectcapmonsterclouclient27/03/2024remove projectcapmonsterccloudclient27/03/2024remove projectcapmonsstercloudclient27/03/2024remove projectcapmonsstercloudcliennt27/03/2024remove projectcapmoneercloudclient27/03/2024remove projectbupi-utils27/03/2024remove projectbup-utils27/03/2024remove projectbpi-utils27/03/2024remove projectbop-utils27/03/2024remove projectbiup-utils27/03/2024remove projectbips-utils27/03/2024remove projectbipp-utils27/03/2024remove projectbip-uutils27/03/2024remove projectbip-uttils27/03/2024remove projectbip-utlils27/03/2024remove projectbip-utjls27/03/2024remove projectbip-utisl27/03/2024remove projectbip-utilz27/03/2024remove projectbip-utilss27/03/2024remove projectbip-utilos27/03/2024remove projectbip-utiles27/03/2024remove projectbip-utile27/03/2024remove projectbip-utilds27/03/2024remove projectbip-util27/03/2024remove projectbip-uitls27/03/2024remove projectbip-uils27/03/2024remove projectbip-u8ls27/03/2024remove projectbiip-utils27/03/2024remove projectbibp-utils27/03/2024remove project## **IOCs** - hxxps://funcaptcha\[.\]ru/paste2 - hxxps://funcaptcha\].\[ru/delivery - hxxps://funcaptcha.ru/atomic/app.asar - ABE19B0964DAF24CD82C6DB59212FD7A61C4C8335DD4A32B8E55C7C05C17220D 0C1DDD33E630F4AC684880F0E673DFA84919272494C11DA0F1EC05FB4F919CE8