"This malware has consistent US EST timestamps, so it's probably not the CIA since the CIA knows to change timestamps. Probably some Iran masquerading as a US malware."