{"Win.Malware.Nymaim-7615052-1": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "network-dns-category-new", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "dns-public-server-contacted", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "registry-large-data-entry", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0005", "T1112"]}, {"bi": "pe-imports-toolhelp", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "malware-nymaim-registry", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "possible-dga-communication", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0011", "TA0005", "T1483"]}, {"bi": "pe-section-blank-name", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-dns-safe-categories", "hashes": ["813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Nymaim is malware that can be used to deliver ransomware and other malicious payloads. It uses a domain generation algorithm to generate potential command and control (C2) domains to connect to additional payloads.", "hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c", "9a6dfe8c0316ad9fde8d6bf8be16c48549bd66e8fe87116f5ca29427ea4d4fec", "9da394f67e7a2aa6c9550978b36fb000c11f7cac7ee011f6db6cccb7ecef9bb3", "9f456c77366d055f02f5f2ba077a9d02311138e61e7c0605f1449ef589f634eb", "afb289fd0014225c073ce413d45958f59c089d6e776d2ea59739cb9974180b29", "b3101a2f86dd75c3e33e3f83a862eee1d4bd6e7ed3c8f4249f6b1e45062d7529", "b34b6700b404b762e772b6e7b92b1593c8541fea9ab202aa90de534def567858", "b671f89bb227e5e5756a5d59f16ed04faf274bbc66498a77ec5a38e8141cc2a5", "b90a2522d9d60ed857275281753d3367ece9591d449658b53d7b7a88e8bbe463", "c40a62f80fc9e14d7b815f04065fb07d3ba6fb3e6836b7af72f7ec4339774de0", "c80afbc3fa19e5ad7f399d22f1553c86d3e8a9e51eedb29a01aede23ba67a28d", "c9d7288a96431001a433a4b82c7284c7a18c9cd4f0f1f00f1f1209f57fde438f", "d1c31c4afdac881f236859a9ee80e73f6098eae6b328a375b45829c2bce10296", "de615c3c7303b5ff4feae9657beb23df393198529a698dce6e97d8c923552a8a", "e529b460a072507839951bcc3bd9ea6a639c229c3922fd7139c5d85228627c5b", "fbaaed0037589824e3ab39d1ac63ffa2cb19a2708e8c7022d118e1ad2a8263a3", "fd6f35fd483427796b63043e163c8f4ac6b505b027e27825ddca66648129a11d", "fe9a38b1d1aadad9e78e566ee9f43d63ca722444d52fa7dd925cea223a956664", "feba834dc7bc4acdb600b42687f105c56f5a13dd44b3229860d8d09e42202c98"], "iocs": {"domain": [{"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "qssnxj[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "zotsvo[.]pw"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "ifgkwqmqhph[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "dhlvdxugyo[.]com"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "hkeucj[.]pw"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "dyhrvl[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "uwmbqu[.]com"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "pzerd[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "sdyhxawrvxae[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "satdu[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "gqmaztf[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "iirandx[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "nkjed[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "qouatnrg[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "qshwuerhzuaz[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "nfaqzajrpxj[.]com"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "iobmasbcd[.]pw"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "qmotexhwaj[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "knhausn[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "towufmzxq[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "kzdvq[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "orukxxgc[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "lnibjvv[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "bvlgsvhj[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "dnhlpemupjc[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "vajhlogwvn[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "gvgez[.]com"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "zxaogqcc[.]com"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "xaxlmqnepqo[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "kgtxqfjurcd[.]pw"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "dftcqkz[.]pw"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "uowubzrbp[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "nsldzpu[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "qthrcophxmnh[.]pw"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "ezvzcc[.]in"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "lfkgr[.]net"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "zimyiunsgwcz[.]com"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "qchpk[.]pw"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "llokaketw[.]com"}, {"hashes": ["043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "host": "cpmnbs[.]com"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "adaek[.]in"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "vxcgkij[.]pw"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "zhqxh[.]com"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "mbzlgq[.]in"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "lvqbcs[.]in"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "wmnjvfec[.]pw"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "dfkcliykes[.]in"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "jyrraqyhqroh[.]pw"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "tefelcuc[.]net"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04"], "host": "mdvtdsx[.]pw"}], "file": [{"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "path": "%ProgramData%\\ph"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "path": "%ProgramData%\\ph\\eqdw.dbc"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "path": "%ProgramData%\\ph\\fktiipx.ftf"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "path": "%TEMP%\\gocf.ksv"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "path": "%TEMP%\\kpqlnn.iuy"}], "ip": [], "mutex": [{"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{2D6DB911-C222-9814-3135-344B99BBA4BA}"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{369514D7-C789-5986-2D19-AB81D1DD3BA1}"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{D0BDC0D1-57A4-C2CF-6C93-0085B58FFA2A}"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{D8E7AB94-6F65-71DE-8DA1-FE621BE2E606}"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{F04311D2-A565-19AE-AB73-281BA7FE97B5}"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{F6F578C7-92FE-B7B1-40CF-049F3710A368}"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{445DE72D-9B60-6571-D392-6925F65F5FE7}"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "name": "Local\\{E41B13B6-7B07-8560-4026-41A66FCE339D}"}], "registry": [{"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\GOCFK", "value_name": null}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\KPQL", "value_name": null}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\GOCFK", "value_name": "mbijg"}, {"hashes": ["029369003b1fb6b4b0191a54b330673685e059d390b3393d4f58ebccb3fa0a04", "043ae03261bd31cf86ca5c6c1910e4436d4b9f82e1bcecb8039d326ca271393b", "0a99f500898952fcc6ac124ec1bdbe697ef2c9de93bd829f6d0ba8ce438236ff", "0f85f19794584741038a9a8d51761315dce953aa2383ef92c4493f1fb02c7a1d", "109bd3f040c9077b74e75416e4b133098143bc40ebba6456624e8869cf1619cf", "18c22cdb43d3095d980b31a98c069f5511648b447d65834a1a004be6587e4062", "1dc86f9ff40d164a384ee34879dbe58ee1717f51e7316bac351cae3b60cbf509", "2524bf4a82f9eb9a2acdd291ef82068667566c54155f3669b5fdef61ad0c859e", "2cac77ac4a68039f57b6da94ff827ccf592d6b391762a010ba1d798461ad780c", "3f2e085857d5c5b94e2adcdf7a9d199e4105439fe2f55dfe53ec8428297bedf4", "42a971335515a1ed31e629c0faf85b5d2cd51eada6e1c0c4659c0d0322b62a27", "4da003af544afeb34668f0a1343632a7953a6219ff2ad62b8d391e1b4bb305db", "4e7045fa64fc0de40a22f9bddbbe7f4f2b9ce531f17b009378c7b8eb26bd1a2f", "6057c88112b275c6d47589fd10f863987010804dd01be8b2c8b449a7ed08d9da", "6283c33ad5cb1fa29ccef34b58b6cf84ed3b5fb5d69940abc7cf88b2d5091937", "63011ace1ebac398e71d65bb5a0d0c4896a41d64c462f46a8c1380594cdfabfc", "683d2ec46c5bf2a8cb5a18e807283e23eeff66af8e6274fddee6058c170da90a", "68a44b6a3401677da55c3a42713bcaab7ef02b2f54bac56c2a8d671157d6e228", "69848c2d721dc6e96085bd8d2e7f0a9e9b34c5d00a9dbd71e5823272c55da027", "7560cadc3a05dc897e5d6e512a35325cad6142458cbab6bb4d2b5ba0387bbd4f", "7a081e847f783ca398362fb4172a266e8387fef4d860ce25c4bc2986a25ce690", "7d9e94ccc83b6b3c3c12761047df64368321fa103aedeab18d57489305af2058", "813a531f48400ae896114791fdb0dc1f5783da5824311f5ea6bce8593213e393", "836f598e59d30233a42d0ec25f4ac237f3d7d12f52646ed400244d4539fbb3c3", "88ef4262d2cb80330e3aced7a7bf6409668333f42c41915f2e64f334ea25693c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\KPQL", "value_name": "efp"}]}, "reports_count": 25}, "Win.Malware.Ursu-7610305-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "pe-uses-visual-basic", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": []}, {"bi": "network-dns-category-new", "hashes": ["1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "file-ini-read", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "windows-vault-api", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "network-snort-indicator-compromise", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-communications-http-post", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "feed-domain-rat", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "malware-lokibot-mutex-detected", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "suspicious-user-agent", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "deleted-submitted-file", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "malware-known-trojan-av", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "enumeration-browser-information", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0007", "TA0006", "T1003", "T1217"]}, {"bi": "compound-vb-self-delete", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": []}, {"bi": "altered-sample-snort-flagged", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "process-check-ucbrowser", "hashes": ["728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09"], "mitre_attack_tags": ["TA0007"]}, {"bi": "network-dns-malicious-snort", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "mitre_attack_tags": ["TA0011"]}, {"bi": "altered-sample-dns-flagged", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "network-dns-upload-file", "hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Ursu is a generic malware that has numerous functions. It contacts a C2 server and performs code injection in the address space of legitimate processes. It is able to achieve persistence and collect confidential data. It is spread via email.", "hashes": ["0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09", "373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f", "728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6"], "iocs": {"domain": [{"hashes": ["0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841", "1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d", "5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc", "5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f", "6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f", "8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279", "95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1", "982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c", "c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5", "d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6"], "host": "www[.]cloudflare[.]com"}, {"hashes": ["0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841"], "host": "forzamaguire[.]tk"}, {"hashes": ["1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d"], "host": "nomnyz[.]ga"}, {"hashes": ["2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09"], "host": "yanguz[.]cf"}, {"hashes": ["5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f"], "host": "nomnyz[.]cf"}, {"hashes": ["5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc"], "host": "forza-lindelof[.]cf"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "host": "forza-maguire[.]cf"}, {"hashes": ["6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "host": "abizima[.]gq"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "host": "forzamaguire[.]ml"}, {"hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "host": "forzalindelof[.]ml"}, {"hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "host": "radiomar[.]cf"}, {"hashes": ["728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41"], "host": "forzamaguire[.]ga"}, {"hashes": ["d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6"], "host": "global-solution[.]gq"}, {"hashes": ["982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c"], "host": "mabelis[.]cf"}, {"hashes": ["95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1"], "host": "forza-lindelof[.]ga"}, {"hashes": ["8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279"], "host": "somaplast[.]cf"}, {"hashes": ["c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5"], "host": "somaplast[.]ga"}], "file": [{"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "path": "%APPDATA%\\D1CC40\\0F3583.hdb"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "path": "%APPDATA%\\D1CC40\\0F3583.lck"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "path": "%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-1258710499-2222286471-4214075941-500\\a18ca4003deb042bbee7a40f15e1970b_8f793a96-da80-4751-83f9-b23d8b735fb1"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "path": "%APPDATA%\\D282E1"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "path": "%APPDATA%\\D282E1\\1E80C5.lck"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "path": "%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-2580483871-590521980-3826313501-500\\a18ca4003deb042bbee7a40f15e1970b_d19ab989-a35f-4710-83df-7b2db7efe7c5"}], "ip": [{"hashes": ["0540a6fd5a8d8b711724dd99e9dbd29896684503ae458094ac77caa0a3191841"], "ip": "104[.]27[.]158[.]211"}, {"hashes": ["1c54ab51ea01e775972504739fe8d1a6af74c3c342027a0f731f66cf3d63e01d"], "ip": "104[.]28[.]8[.]228"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "ip": "104[.]27[.]183[.]17"}, {"hashes": ["2a0cb867ebb8e219fd317f3602812b7e3d2b73aa10b52f434266379861709d09"], "ip": "104[.]24[.]113[.]102"}, {"hashes": ["5732fe839b0157b0e1da1c03eea1bab091e04899a3bc7b70a23dcb97467fe0fc"], "ip": "104[.]31[.]77[.]13"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "ip": "104[.]28[.]2[.]54"}, {"hashes": ["5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f"], "ip": "104[.]28[.]5[.]52"}, {"hashes": ["6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "ip": "104[.]31[.]83[.]86"}, {"hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "ip": "104[.]27[.]183[.]246"}, {"hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "ip": "104[.]18[.]55[.]178"}, {"hashes": ["728475baa6296537c166911468e3b22068e016a9e51171b1d9ab3e5426c60f41"], "ip": "104[.]27[.]184[.]69"}, {"hashes": ["8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279"], "ip": "104[.]18[.]52[.]132"}, {"hashes": ["982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c"], "ip": "104[.]31[.]95[.]137"}, {"hashes": ["95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1"], "ip": "104[.]24[.]102[.]152"}, {"hashes": ["d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6"], "ip": "104[.]24[.]118[.]237"}, {"hashes": ["c57c12e9658458a407392b510316bc134946a2af1a6bc8720f1a8f785a8e15c5"], "ip": "104[.]24[.]103[.]126"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6"], "ip": "104[.]28[.]3[.]54"}, {"hashes": ["5795d3b441fba24cd5eea9d63283363cc301c947fc9c1490e8c342eaaabcfa2f"], "ip": "104[.]28[.]4[.]52"}, {"hashes": ["6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "ip": "104[.]18[.]54[.]178"}, {"hashes": ["6f9126661fc692a55b8a1511d90646b550f0dd4d083c06cb1d8759516ce0e80f"], "ip": "104[.]31[.]82[.]86"}, {"hashes": ["8e8c18e99f0f891984fc158ed482a000b760290f3f4f020a4dfa42a32321a279"], "ip": "104[.]18[.]53[.]132"}, {"hashes": ["95e153e75af1f9fcf7d255863b5ce7aa77536e5a4d4b007f594c2ea47a39e7a1"], "ip": "104[.]24[.]103[.]152"}, {"hashes": ["982bcdf19c39c6125771d12a007e9a723d3ea651f0cde4ee03777bd177e5792c"], "ip": "104[.]31[.]94[.]137"}, {"hashes": ["d72cc73cfd39751bddc1156be01d42b7882f5f0f647b7d3282ab6f66108ca6b6"], "ip": "104[.]24[.]119[.]237"}], "mutex": [{"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "name": "3749282D282E1E80C56CAE5A"}, {"hashes": ["373f0152bfa9d4489b824883dbb7d33d9d3df334400f7c235afe83e0268db0d6", "6d5c50c1be5dd9c3b83c39f4a0d7cdd20026cccb5c1c86a067f35f3896cb160d"], "name": "3BA87BBD1CC40F3583D46680"}], "registry": []}, "reports_count": 14}, "Win.Ransomware.Cerber-7613460-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": []}, {"bi": "excessive-udp-connections", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}, {"bi": "malware-ransomware-cerber", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "process-ping", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0011", "TA0007", "T1049"]}, {"bi": "process-ping-localhost", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0011", "TA0007", "T1016"]}, {"bi": "file-pending-delete", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "process-taskkill", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "process-hollowing-detected", "hashes": ["147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a"], "mitre_attack_tags": []}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Cerber is ransomware that encrypts documents, photos, databases and other important files. Historically, this malware would replace files with encrypted versions and add the file extension \".cerber,\" although in more recent campaigns, other file extensions are used.", "hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dcd35df6ae76b4b5b6caf703515d271031335ea8098383e64557c20b97344dbd", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "iocs": {"domain": [{"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "host": "api[.]blockcypher[.]com"}, {"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8"], "host": "btc[.]blockr[.]io"}, {"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8"], "host": "chain[.]so"}, {"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8"], "host": "bitaps[.]com"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "host": "bc-prod-web-lb-430045627[.]us-east-1[.]elb[.]amazonaws[.]com"}, {"hashes": ["48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "host": "p27dokhpz2n7nvgr[.]1c4zie[.]top"}, {"hashes": ["301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53"], "host": "p27dokhpz2n7nvgr[.]1pbu64[.]top"}, {"hashes": ["7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2"], "host": "p27dokhpz2n7nvgr[.]12gzrv[.]top"}], "file": [{"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "path": "%TEMP%\\d19ab989"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "path": "%TEMP%\\d19ab989\\4710.tmp"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "path": "%TEMP%\\d19ab989\\a35f.tmp"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%System32%\\wbem\\Logs\\wbemprox.log"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Adobe\\Acrobat\\9.0\\UserCache.bin"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Adobe\\Acrobat\\10.0\\rdrmessage.zip"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Adobe\\Acrobat\\7.0\\UserCache.bin"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Adobe\\Acrobat\\8.0\\UserCache.bin"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\FileZilla\\filezilla.xml"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\FileZilla\\queue.sqlite3"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\HNC\\User\\Fonts\\PrivateFont90.dat"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Microsoft\\Address Book\\Administrator.wab"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Microsoft\\Document Building Blocks\\1033\\Building Blocks.dotx"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Microsoft\\HTML Help\\hh.dat"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\brndlog.txt"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Microsoft\\Templates\\Normal.dotm"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\addons.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\blocklist.xml"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\bookmarkbackups\\bookmarks-2013-04-01.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\bookmarkbackups\\bookmarks-2013-05-28.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\bookmarkbackups\\bookmarks-2013-05-29.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\bookmarkbackups\\bookmarks-2013-06-10.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\bookmarkbackups\\bookmarks-2013-09-27.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\bookmarkbackups\\bookmarks-2013-10-03.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\bookmarkbackups\\bookmarks-2013-10-04.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\cert8.db"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\chromeappsstore.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\content-prefs.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\cookies.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\downloads.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\extensions.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\formhistory.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\key3.db"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\permissions.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\places.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\pluginreg.dat"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\prefs.js"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\search.json"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\search.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\secmod.db"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\signons.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\iv5rtgu3.default\\webappsstore.sqlite"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%HOMEPATH%\\Templates\\excel.xls"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%HOMEPATH%\\Templates\\powerpnt.ppt"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%HOMEPATH%\\Templates\\quattro.wb2"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "%HOMEPATH%\\Templates\\winword.doc"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "path": "<dir>\\<random, matching [A-Z0-9\\-]{10}.[A-F0-9]{4}> (copy)"}, {"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8"], "path": "%TEMP%\\tmp1.bmp"}], "ip": [{"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "ip": "91[.]239[.]24[.]0/25"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "ip": "58[.]43[.]12[.]0/27"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "ip": "91[.]1[.]48[.]0/27"}, {"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8"], "ip": "178[.]128[.]255[.]179"}, {"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8"], "ip": "104[.]20[.]21[.]251"}, {"hashes": ["10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8"], "ip": "104[.]24[.]104[.]254"}, {"hashes": ["10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309"], "ip": "104[.]20[.]20[.]251"}, {"hashes": ["0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd"], "ip": "104[.]24[.]105[.]254"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "34[.]196[.]236[.]57"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "104[.]16[.]149[.]172"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "104[.]16[.]148[.]172"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "104[.]16[.]151[.]172"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "34[.]196[.]207[.]101"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "104[.]25[.]47[.]99"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "104[.]25[.]48[.]99"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "104[.]16[.]150[.]172"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "104[.]16[.]152[.]172"}, {"hashes": ["147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf"], "ip": "198[.]211[.]122[.]103"}, {"hashes": ["48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "ip": "54[.]152[.]114[.]154"}, {"hashes": ["48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "ip": "192[.]169[.]7[.]201"}, {"hashes": ["301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53"], "ip": "185[.]183[.]98[.]78"}, {"hashes": ["7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2"], "ip": "83[.]243[.]41[.]162"}], "mutex": [{"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "name": "shell.{381828AA-8B28-3374-1B67-35680555C5EF}"}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f"], "name": "shell.{<random GUID>}"}], "registry": [{"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER", "value_name": null}, {"hashes": ["05f26fd753356cfc5d545eb01e79baf53445a601ea1569878fb1c63b52f5e6d4", "0abd1a84723a6597fb2c3478e1a83033a5aba2891c964ab5737fe7910d80e28c", "0ee72b0840ce97cb8b5a37084fc43fa7c27686e4e8f4bf09c0c0b7d88b810d1a", "10819f12f84257e20d23fadf371e42e4e6521c60146472a23cafab73c9516234", "10a5ac7ce80bb6970ca50a271ce35133cd92a56080369b0c4b42bb918b0e3026", "1435f8e106ffee6f5ada5ffd4cb0828f81f0e58071e9b3872878e50c0273b8d2", "147065190d82fbf0df3a182e87139edef847443b0ee0bb8456fcbab4774b2f5b", "147b376c58e4089ebc217b859068d113faaf691a7e5c96b974beef6c792f4f10", "2517618db9f32379899d9eab1e6a1336b883fe98301f1486f6a0dccc7ebb4078", "2619700ad7f26a19504e6362ef53d0c140c40d9f704de62bc5c46170139e35d9", "2d58499468790c62970006e7e2498776a4a3502461f31d2d240ba69c4d97f0ad", "2e454bfbce9129ef89ce883ea2ad6f1373cd92b4d902d38534442bf1c7dfb627", "301417411755886089f7d037b89405bf84611e5f7d99f8c02afc30a763beca53", "33c0a8a15cd7cf1b069a4568b9da60a32070f63df5520080c7fda84ac07446b3", "46f1f3a5569df1fa4ebc3f9838018760761f01547c86cf8114a9f41e444ac65c", "48b36eca72cd50b9f026fa1715d0b3566a7c4554625f40a36cf159de684563d5", "5bef0909ef45b328e051c6ee7f6ea0103d0ec538f0d9db877c5bae26aeb0bc1e", "635d3910ce962f06530c70fb81cb2d388f95d07d53423cb88cefd2e5c254c72b", "6936663f05a2eb0a714d9a8fb83bcb42158fb75d91ed99130f560628be770309", "6ac61263ed29a92913576e3cee15305e2999907b56334573d6bc0a8f35cf34ea", "6ddd63c3bd61e7c10d9a873114d6c014fb67e3f0d968ecc5bcbb337fb9c6bcbd", "7626e74dff3e39f5dc7468c6a3b9da48e4957572ff7e382a6b6c1ce05befc0c2", "76f4a0d9a8bf4c0610f8b56296be4d0bc0e2261fab5ef472776070101a7e3adf", "785dd8bad5de7e38a96fa9e5c4985023b0f9b9ceb898e7610d2862abbe7b1ba8", "7b2ead6084f7b6a18b756f18b2000967584630ef072debe38f8868cb750e3e0f", "870a4dfd67bcb4fa410784d5ed6ad01671976487a4ae6f0821bdc4c25720fdcf", "8e786250c0abcffbe6637f35563f7f1466e42f8f44f11c434885ac2d2f0d398b", "9bb006954f52ada9c433c18cd84cc58ac0aa8e6b8aabcdfe7fca362025076fa0", "9c127ee801e4aaefcac20e61aa124dd3575513292be57a794776723ab189d5e3", "9cd35332804b20ba6537fc12d342cfd511c33d6fc391e69a599a3dcc0f741394", "9de8ab65e4ba4463a2d281bdd366830036f8044e2a07adece3d847cc83ed58b4", "9e1fdee15515e6758fed5e891c1f0deb2207f58e946765d58dc73aafb4928bd5", "9ef01296f640f0e44820197d2dbf9aebbf5e26870c4c61ccca8ec9af13219962", "a2e7179a4283ea25e4c68cd123e6d4f17d2f71b21a8f017600ead5fc3e803899", "a87f78b39c523956229fbce8d7aff2ecbc3390313e3c8d83e3c4f244f2c4f62a", "a8ed33cc8df85706a48a80e2a4f7100c3bf39ea2a369fb793cd69dc948841476", "aa69046974fa9aec4c0ac009bacb636228b17c3e4ebcdabed4be7d19c6e15872", "ae0846f836988f71f640f70c3d1ec2f7e8957519c4481e660190bf8b639cb1c8", "b476edbf82670273f2586fdc1c234eeaaea293062ba164779ec71d8d40aebee1", "bb10c831695f3455ec7deed1787bf68424b4a027773ca15b8dd68bb51ba276bd", "c1e5c6ea0a19f471e3daab406e3942ad38eb3ce16560113046164ebedafa1e8a", "cc031f0956035cbef6c9d60fee5108feaef0edebea07b1a3ffccca77d752dfaf", "ce5a50c416b566eb604f43de95dd4521dd5ea84a2590c4a13deb1cc2962a6825", "d33ad77a4c7fb47f801df9e902a461fad78e3a9acc353eee393fe56704f4bfab", "d56c9db17a8e1f1a58f89d6dd39258cbc330438a94fac68b4bc918bc080ab426", "da317997319285b3069f33feee9e456c01300f0e5bc1a754350fc6a22ef62518", "dda0c7c8a7fc76538dca61bacdc093f7881dc4886bb13025d0fb5560ac3f587e", "e16b8fc7959b5035bf5f082c44a7337993d400f0c7ecdf4f44545f104864437c", "e18eafc7c66f49a04c6753fc1f6abfd1a7d96c14838d9b0d3755472ae40938c6", "e1e893b2c592ee14578e1122b4bc08c90815e1643e77795939b04e660bb743e3", "e3272708e79da0104820006379d87721b243604b4e605cee1a1ac9f6607bbbdd", "e93ffb297e8424f6e3d47d1ec9aef6fc0ed783953f720f6014793b366a0fd892", "f1358eb8794e77e9fabe80ed3c4e5322f46e49d6395009d52c06ace41f3a7132", "f9c14da77cdd28770920f3f7d02fd9a452e1f16a6b0dca04c71efa5feb4ae72a"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER", "value_name": "PendingFileRenameOperations"}]}, "reports_count": 54}, "Win.Ransomware.Gandcrab-7615049-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "pe-uses-fasm", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-nameserver", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "file-ini-read", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "firefox-prefs-modified", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0009"]}, {"bi": "network-file-uploaded", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "nginx-webserver-detected", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "network-communications-http-get", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "netbios-query", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "network-dns-upload-file", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-snort-policy", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "network-snort-server", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "network-dns-malicious-snort", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0011"]}, {"bi": "network-snort-protocol", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-dns-category-parked-domain", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "process-requested-named-pipe", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0004", "TA0005"]}, {"bi": "http-response-client-error", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "enumeration-browser-information", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0007", "TA0006", "T1003", "T1217"]}, {"bi": "modified-file-in-program-dir", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "http-response-server-error", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "firefox-cookie-read", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}, {"bi": "pe-imports-toolhelp", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "modified-file-on-usb", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0011", "T1092"]}, {"bi": "excessive-file-modifications", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "file-ini-modified", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0003"]}, {"bi": "malware-generic-ransomware-entropy", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "malware-generic-ransomware-backup-del", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "feed-domain-ransomware", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "wmic-shadowcopy-delete", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0002", "TA0040", "T1047", "T1490"]}, {"bi": "microsoft-block-rule-list-app-executed", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "js-contains-massive-strings", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "html-redirect", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "firefox-cert-database-modified", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0011", "TA0006", "TA0005", "T1003"]}, {"bi": "malware-gandcrab-domain-detected", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "firefox-password-manager-local-database-modfication", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "malware-gandcrab-mutex-v412", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "excessive-logical-drive-enumeration", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0007", "T1120", "T1025"]}, {"bi": "recycler-file-creation", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "http-post-image-url", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0011", "TA0005", "T1011"]}, {"bi": "malware-generic-ransomware", "hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "malware-azorult-mutex-detected", "hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "html-iframe-no-space", "hashes": ["63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "mitre_attack_tags": ["TA0010", "TA0011", "T1071"]}, {"bi": "deleted-submitted-file", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "altered-sample-dns-flagged", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "unsigned-roaming-execution", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "process-svchost-suspicious-launch", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0005"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-autorun-key-modified", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "files-deleted-used-batch", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "cmd-exe-file-execution", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "script-contains-url", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": []}, {"bi": "malware-compound-cta-activity", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": []}, {"bi": "malware-panda-mutex-detected", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": []}, {"bi": "process-check-deep-freeze", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0007", "T1497"]}, {"bi": "process-check-analysis-tools", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0007", "T1497"]}, {"bi": "sandbox-detection-mutex", "hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "dns-punycode-domain-detected", "hashes": ["63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486"], "mitre_attack_tags": ["TA0011", "TA0005", "T1132", "T1027"]}, {"bi": "network-snort-browser", "hashes": ["63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": []}, {"bi": "html-phishing-page", "hashes": ["7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f"], "mitre_attack_tags": ["TA0001", "T1189", "T1078"]}, {"bi": "artifact-windows-task", "hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0002", "TA0003", "T1053"]}, {"bi": "startup-folder-modification", "hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "network-explorer-process", "hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0011", "TA0005", "T1055"]}, {"bi": "artifact-lnk-calls-cmd", "hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "startup-folder-lnk-file", "hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "malware-smokeloader-mutex-detected", "hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "malware-smokeloader-artifact-detected", "hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-obfuscation", "hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-service-autostart-disabled", "hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0003", "T1112", "T1489", "T1058"]}, {"bi": "sc-service-stop", "hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005", "T1489"]}, {"bi": "sc-service-delete", "hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "registry-service-delete-flag-set", "hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0003", "T1112", "T1489", "T1058"]}, {"bi": "sc-service-stop-windefend", "hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "mitre_attack_tags": ["TA0005", "T1089"]}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Gandcrab is ransomware that encrypts documents, photos, databases and other important files using the file extension \".GDCB,\" \".CRAB\" or \".KRAB\". Gandcrab is spread through both traditional spam campaigns, as well as multiple exploit kits, including Rig and Grandsoft.", "hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c"], "iocs": {"domain": [{"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "perovaphoto[.]ru"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "koloritplus[.]ru"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "pp-panda74[.]ru"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "dna-cp[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "boatshowradio[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]mimid[.]cz"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "tommarmores[.]com[.]br"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "cevent[.]net"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]lagouttedelixir[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "alem[.]be"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "h5s[.]vn"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "marketisleri[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "wpakademi[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]rment[.]in"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]fabbfoundation[.]gm"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "6chen[.]cn"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "zaeba[.]co[.]uk"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]krishnagrp[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]poketeg[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]n2plus[.]co[.]th"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "bellytobabyphotographyseattle[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]cakav[.]hu"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]toflyaviacao[.]com[.]br"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]perfectfunnelblueprint[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]wash-wear[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "goodapd[.]website"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "royal[.]by"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "big-game-fishing-croatia[.]hr"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "picusglancus[.]pl"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "test[.]theveeview[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "sherouk[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "vjccons[.]com[.]vn"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "mauricionacif[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]himmerlandgolf[.]dk"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "evotech[.]lu"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "graftedinn[.]us"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "relectrica[.]com[.]mx"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "krasnaypolyana123[.]ru"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "simetribilisim[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "devdev[.]com[.]br"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "blokefeed[.]club"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "cyclevegas[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "unnatimotors[.]in"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "smbardoli[.]org"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "bloghalm[.]eu"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "bethel[.]com[.]ve"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "hoteltravel2018[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "www[.]ismcrossconnect[.]com"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "aurumwedding[.]ru"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "host": "top-22[.]ru"}], "file": [{"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\ntuser.ini"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Credentials\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\Quick Launch\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Media Player\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\Document Themes\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\SmartArt Graphics\\1033\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\SmartArt Graphics\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\Word Document Building Blocks\\1033\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\Word Document Building Blocks\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\Document Themes\\1033\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\Document Themes\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\SmartArt Graphics\\1033\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\SmartArt Graphics\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\Word Document Building Blocks\\1033\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\Word Document Building Blocks\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\UProof\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Microsoft\\Word\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Mozilla\\Extensions\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Mozilla\\Firefox\\Crash Reports\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Mozilla\\Firefox\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Mozilla\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Desktop\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Favorites\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Favorites\\Links\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Favorites\\Microsoft Websites\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\NetHood\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\PrintHood\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Recent\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\SendTo\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Start Menu\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Templates\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "\\$Recycle.Bin\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "\\$Recycle.Bin\\S-1-5-21-2580483871-590521980-3826313501-500\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\AppData\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\Media Center Programs\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Documents\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Downloads\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Links\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\Saved Games\\KRAB-DECRYPT.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "\\$Recycle.Bin\\<user SID>\\$<random, matching '[A-Z0-9]{7}'>.txt"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%HOMEPATH%\\98b689dd98b68e3943.lock"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "path": "%APPDATA%\\98b689dd98b68e3943.lock"}], "ip": [{"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]27[.]163[.]241"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "213[.]186[.]33[.]19"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "213[.]186[.]33[.]3"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "149[.]56[.]154[.]141"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "69[.]73[.]180[.]151"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "179[.]188[.]11[.]34"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "50[.]87[.]58[.]165"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "217[.]160[.]0[.]234"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "89[.]252[.]187[.]72"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "202[.]43[.]45[.]181"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "87[.]236[.]16[.]31"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "77[.]104[.]144[.]25"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "171[.]244[.]34[.]167"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "217[.]174[.]149[.]130"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "217[.]160[.]0[.]27"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]31[.]74[.]227"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]28[.]30[.]160"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]24[.]102[.]153"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]31[.]78[.]102"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f"], "ip": "104[.]28[.]31[.]160"}, {"hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d", "715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "ip": "178[.]210[.]89[.]119"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "213[.]186[.]33[.]5"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "204[.]11[.]56[.]48"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "23[.]236[.]62[.]147"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "217[.]70[.]184[.]50"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "52[.]58[.]78[.]16"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "92[.]53[.]96[.]201"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "67[.]227[.]157[.]167"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "69[.]163[.]193[.]127"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "194[.]154[.]192[.]67"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "87[.]236[.]16[.]219"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "192[.]185[.]122[.]252"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "93[.]125[.]99[.]121"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "66[.]96[.]147[.]103"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "45[.]118[.]145[.]96"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "87[.]236[.]16[.]222"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "186[.]202[.]153[.]161"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "23[.]100[.]15[.]180"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "62[.]210[.]24[.]116"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "109[.]74[.]157[.]147"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "39[.]107[.]34[.]197"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "103[.]143[.]173[.]22"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "178[.]238[.]37[.]163"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "35[.]208[.]145[.]105"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f"], "ip": "104[.]31[.]81[.]105"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]31[.]79[.]102"}, {"hashes": ["7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]27[.]159[.]33"}, {"hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "104[.]31[.]75[.]227"}, {"hashes": ["63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795"], "ip": "104[.]24[.]103[.]153"}, {"hashes": ["ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "ip": "94[.]73[.]150[.]60"}], "mutex": [{"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "name": "Global\\8B5BAAB9E36E4507C5F5.lock"}, {"hashes": ["0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d", "29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881", "6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429", "f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c"], "name": "A16467FA-7343A2EC-6F235135-4B9A74AC-F1DC8406A"}, {"hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d"], "name": "Frz_State"}, {"hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d"], "name": "Sandboxie_SingleInstanceMutex_Control"}, {"hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d"], "name": "<32 random hex characters>"}, {"hashes": ["5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f"], "name": "Global\\FF5BACBED3692507E5F5.lock"}, {"hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "name": "Global\\785161C887200"}, {"hashes": ["715f5c292f719cf496dc97ab92115d71d0e02421a61d409db2e2e4d1098c1167"], "name": "D88B4D3CAE375DED14F392DBA85F311F98B68E3C"}, {"hashes": ["f215e1d482b46e6413cd86a2ca63816a011f37b1ed81d872571d0e8f82f5a78c"], "name": "A238FB80-2231ABE6-BF235135-4B410C86-7EA16E3EA"}, {"hashes": ["0db58143b95364b1c6216bedf0c05a7c0bcc192099d87ebd650b3ae862e2218d"], "name": "A238FB80-2231ABE6-BF235135-4509F56E-58AA53269"}, {"hashes": ["29b1853d6568683011f9e1c23d7a0dc80899bb87911045e3914e9064fa591881"], "name": "A238FB80-2231ABE6-BF235135-42BEEFE7-165F4D9F5"}, {"hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "name": "Global\\fce1c3e1-636e-11ea-a007-00501e3ae7b5"}, {"hashes": ["1a4c33569668cf9140464aab8e4b1de812a1e62a5eacd57af90fbc3fb6765db3"], "name": "Global\\fa617201-636e-11ea-a007-00501e3ae7b5"}, {"hashes": ["6fd4984d90b6924d145c572138f86a3a6f8e06fe6a03172861f148d947d68429"], "name": "A238FB80-2231ABE6-BF235135-49B1803B-0D11E1F34"}], "registry": [{"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\DAC9024F54D8F6DF94935FB1732638CA6AD77C13", "value_name": "Blob"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "key": "<HKCU>\\SOFTWARE\\KEYS_DATA", "value_name": null}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "key": "<HKCU>\\SOFTWARE\\KEYS_DATA\\DATA", "value_name": null}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "key": "<HKCU>\\SOFTWARE\\KEYS_DATA\\DATA", "value_name": "public"}, {"hashes": ["366345c09b7ee53c672ba6a2c0715d3f68b80463d4acea77500f20063884d486", "5f3a6664b198819b13b7692dce049c6e2d421db7ddaaf190118e5d7639bf3f0f", "63b8f4160a35bf105f3213154cb66083c59a2f7693a67eb3f6f6526ca0e5c795", "7e9fab6d29c822c9190b5971507d2722a97a7d6605580d0e1ef8dbec691e673f", "ad7f9eeecb0ce7e6b214ba0bc17e753413a3b94dcd779dc47d4d66f633898357"], "key": "<HKCU>\\SOFTWARE\\KEYS_DATA\\DATA", "value_name": "private"}, {"hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104", "087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d"], "key": "<HKCU>\\Software\\Microsoft\\<random, matching '[A-Z][a-z]{3,11}'>", "value_name": null}, {"hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINDEFEND", "value_name": "DeleteFlag"}, {"hashes": ["877c6debcbf51a302ac977a44bf8c55edf3cb341e559bbf4f33a937fc463f76c"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINDEFEND", "value_name": "Start"}, {"hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "profiles.exe"}, {"hashes": ["034e94dc5839acb2ef70783767ec570621deaf0ca8e7f2e00556854d89804104"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\SPELLING", "value_name": "Ucberexy"}, {"hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "container.exe"}, {"hashes": ["087ba528971fd407e356e8b33ed0592ca03f2e438804bef6e306a8f7b547834d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\USMEFY", "value_name": "Zeis"}]}, "reports_count": 14}, "exprev": [{"count": 4171, "description": "An attempt to exploit CVE-2019-0708 has been detected. The vulnerability, dubbed BlueKeep, is a heap memory corruption which can be triggered by sending a specially crafted Remote Desktop Protocol (RDP) request. Since this vulnerability can be triggered without authentication and allows remote code execution, it can be used by worms to spread automatically without human interaction.", "name": "CVE-2019-0708 detected"}, {"count": 1148, "description": "A PowerShell command with a very long command line argument that may indicate an obfuscated script has been detected. PowerShell is an extensible Windows scripting language present on all versions of Windows. Malware authors use PowerShell in an attempt to evade security software or other monitoring that is not tuned to detect PowerShell based threats.", "name": "Excessively long PowerShell command detected"}, {"count": 295, "description": "DealPly is adware, which claims to improve your online shopping experience. It is often bundled into other legitimate installers and is difficult to uninstall. It creates pop-up advertisements and injects advertisements on webpages. Adware has also been known to download and install malware.", "name": "Dealply adware detected"}, {"count": 191, "description": "Process hollowing is a technique used by some programs to avoid static analysis. In typical usage, a process is started and its obfuscated or encrypted contents are unpacked into memory. The parent then manually sets up the first stages of launching a child process, but before launching it, the memory is cleared and filled in with the memory from the parent instead.", "name": "Process hollowing detected"}, {"count": 164, "description": "Gamarue is a family of malware that can download files and steal information from an infected system. Worm variants of the Gamarue family may spread by infecting USB drives or portable hard disks that have been plugged into a compromised system.", "name": "Gamarue malware detected"}, {"count": 122, "description": "A process was injected into, most likely by an existing Kovter infection. Kovter is a click fraud Trojan that can also act as an information stealer. Kovter is also file-less malware meaning the malicious DLL is stored inside Windows registry and injected directly into memory using PowerShell. It can detect and report the usage of monitoring software such as wireshark and sandboxes to its C2. It spreads through malicious advertising and spam campaigns.", "name": "Kovter injection detected"}, {"count": 62, "description": "Install core is an installer which bundles legitimate applications with offers for additional third-party applications that may be unwanted. The unwanted applications are often adware that display advertising in the form of popups or by injecting into browsers and adding or altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Installcore adware detected"}, {"count": 25, "description": "A PowerShell command was stored in an environment variable and run. The environment variable is commonly set by a previously run script and is used as a means of evasion. This behavior is a known tactic of the Kovter and Poweliks malware families.", "name": "PowerShell file-less infection detected"}, {"count": 20, "description": "An exploit payload intended to connect back to an attacker controlled host using http has been detected.", "name": "Reverse http payload detected"}, {"count": 18, "description": "A site commonly used by fileless malware to download additional data has been detected. Several different families of malware have been observed using these sites to download additional stages to inject into other processes.", "name": "Possible fileless malware download"}, {"count": 11, "description": "Fusion (or FusionPlayer) is an adware family that displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Fusion adware detected"}, {"count": 8, "description": "Corebot is a Trojan with many capabilities found in other prominent families. It features a plugin system to enable it to load a variety of features from the C&C server at any time. Known plugins include RAT capabilities such as taking desktop screenshots, as well as being able to intercept and modify browser communications and steal data, especially data related to banking.", "name": "Corebot malware detected"}, {"count": 5, "description": "An exploit payload intended to connect back to an attacker controlled host using tcp has been detected.", "name": "Reverse tcp payload detected"}], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2020-03-13T13:25:16+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Malware.Nymaim-7615052-1", "Win.Malware.Ursu-7610305-0", "Win.Ransomware.Cerber-7613460-0", "Win.Ransomware.Gandcrab-7615049-0"]}