{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/signed-clickonce-fake-interview-endpoint-guardrails/",
    "fang": "live",
    "exported_at": "2026-08-26T01:03:46Z",
    "total": 31,
    "categories": 6
  },
  "iocs": {
    "IPv4": [
      "1.0.0.182",
      "1.0.0.201",
      "31.76.7.137",
      "45.125.67.42",
      "91.219.238.169"
    ],
    "Domains": [
      "apidrive.online",
      "auth3gapi.online",
      "diegovalanire.digital",
      "gapiauth.info",
      "gapiauth.net",
      "gapiconnect.com",
      "gapidriver.com",
      "gapioath.com",
      "www.dropbox.com"
    ],
    "URLs": [
      "gapidriver.com/api/get.php",
      "gapidriver.com/api/rest.php",
      "gapidriver.com/installer/GapiUpdate.application",
      "https://diegovalanire.digital",
      "https://gapidriver.com/api/get.php",
      "https://gapidriver.com/api/rest.php",
      "https://gapidriver.com/installer/GapiUpdate.application",
      "https://www.dropbox.com/scl/fi/vwtoo632m1y8sqnm5vplm/Razo.rar?...&dl=1"
    ],
    "md5": [
      "4D6ABBFC7C052CBAFAA53659971AC471"
    ],
    "sha1": [
      "12730A7DD9AF98F14441D476C10EB346708C1194"
    ],
    "sha256": [
      "112a2a6496d2235c7a73e53bdea9775b16bb1848be7a5e96436fdee81bb383bc",
      "487f15344db40bca9c8cd853d76cd3e56f15422c9db73e4bc2c2b6c0bcea2806",
      "7866058c7dff4bcf691492ec4d4348f4c813226b1cfcf2adbcb5431eccf9b0b5",
      "839f6d29d0a0a79bb5ce0a8a0326f3dc8f291ffb87e2c55f68c23a5ed69dbf72",
      "99c4dcc677942513ff39846aba051d1baeaaa5ad083dabc9e3f9b49a522b0a0a",
      "a7dc0a626d84e17f16d5fc1096e4478298b2a4b61b42a1cf25043cccf846a50a",
      "fafa019e18d44a47c615da188d7d56a15364ded87a13e3c405b195b4f48314cd"
    ]
  }
}