{"Win.Downloader.Kuluoz-9106992-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "process-svchost-suspicious-launch", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": ["TA0005"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-autorun-key-modified", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-russian", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "malware-kuluoz-mutex", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-http-numeric-ip", "hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": ["TA0011", "TA0005", "T1071"]}, {"bi": "network-communications-http-post", "hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "network-snort-server", "hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "mitre_attack_tags": []}], "category": "Downloader", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Kuluoz, sometimes known as \"Asprox,\" is a modular remote access trojan that is also known to download and execute follow-on malware, such as fake antivirus software. Kuluoz is often delivered via spam emails pretending to be shipment delivery notifications or flight booking confirmations.", "hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "iocs": {"domain": [], "file": [{"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "path": "%LOCALAPPDATA%\\<random, matching '[a-z]{8}'>.exe"}], "ip": [{"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "ip": "192[.]254[.]138[.]62"}, {"hashes": ["0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "ip": "211[.]242[.]129[.]21"}, {"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "ip": "205[.]134[.]239[.]167"}, {"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc"], "ip": "200[.]98[.]130[.]145"}, {"hashes": ["00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc"], "ip": "188[.]126[.]72[.]179"}, {"hashes": ["00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0"], "ip": "162[.]13[.]189[.]52"}, {"hashes": ["0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "ip": "95[.]110[.]147[.]192"}, {"hashes": ["00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249"], "ip": "178[.]32[.]136[.]245"}, {"hashes": ["00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7"], "ip": "193[.]46[.]84[.]84"}, {"hashes": ["bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "ip": "204[.]79[.]197[.]200"}], "mutex": [{"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "name": "aaAdministrator"}, {"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "name": "abAdministrator"}], "registry": [{"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c", "00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920", "0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41", "044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb", "0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d", "22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe", "36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a", "461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76", "4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679", "713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911", "7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b", "89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7", "8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913", "94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb", "9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032", "a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249", "a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2", "b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849", "b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d", "bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940", "d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0", "daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc", "ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "key": "<HKCU>\\SOFTWARE\\<random, matching '[a-zA-Z0-9]{5,9}'>", "value_name": null}, {"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c"], "key": "<HKCU>\\SOFTWARE\\KXPXUOLD", "value_name": "khdfeori"}, {"hashes": ["0094e88fa062e4513c7f4d11697fcdffc8026662c60edb61be710f274d26230c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "evkhrnga"}, {"hashes": ["0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41"], "key": "<HKCU>\\SOFTWARE\\KDCUXVLB", "value_name": "jxhhspjt"}, {"hashes": ["0337bd4c1f05d2ccf685a405e65dcd6aa02ab9353ccf25d0f820012c646e5b41"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "doinvppb"}, {"hashes": ["36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a"], "key": "<HKCU>\\SOFTWARE\\LKCRGDPW", "value_name": "psilxpnc"}, {"hashes": ["36871e569fb5877b7d51eda8644c168f6aff59854bb610292d8ba546adf5a81a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "oidhjofc"}, {"hashes": ["713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911"], "key": "<HKCU>\\SOFTWARE\\SQFKXOKD", "value_name": "qhibpanh"}, {"hashes": ["713b37fe27bce83bf70a8477599c500b7cf8cd1bc6eff3394d48514c2f510911"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "sumldepp"}, {"hashes": ["00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920"], "key": "<HKCU>\\SOFTWARE\\XSOONHAI", "value_name": "uomsguen"}, {"hashes": ["00ee20cdebe019ce877861915de7962280ac4cfa19150971f785c63d03d27920"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "weicpshh"}, {"hashes": ["a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249"], "key": "<HKCU>\\SOFTWARE\\RXGQRMRC", "value_name": "jatacetp"}, {"hashes": ["a00f08cea9222485c8717008b4aa728351a1c4908a49d3662de428002261e249"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "vksouqno"}, {"hashes": ["0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d"], "key": "<HKCU>\\SOFTWARE\\MUDBHNSD", "value_name": "hxvouekb"}, {"hashes": ["0dc859046c6a06ca537b7b51606089b3109eb09dceb648e2efdc98d38bfa254d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "lfbolshp"}, {"hashes": ["22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe"], "key": "<HKCU>\\SOFTWARE\\JNRVOLUN", "value_name": "lkwuacvk"}, {"hashes": ["22ee8fff8c09c799d23a9d671c94637530d7d60f15d28da87c6c06f173f585fe"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "bjrvltkx"}, {"hashes": ["7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b"], "key": "<HKCU>\\SOFTWARE\\NNTUCSAX", "value_name": "btperann"}, {"hashes": ["7e488f85e322f137c9ed3a72ec4e799217802f208058574f98f2db81b7e6573b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "qrhfxend"}, {"hashes": ["9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032"], "key": "<HKCU>\\SOFTWARE\\MCDUIADL", "value_name": "hcbajwak"}, {"hashes": ["9a821b167bd79f460b25d5602b139fdc3ad817b12fb69ff3512cf9439c369032"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "dmewtiof"}, {"hashes": ["a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2"], "key": "<HKCU>\\SOFTWARE\\QNIFLETT", "value_name": "smchkqff"}, {"hashes": ["a7ff6d32541a4f87b0c588485e552fbf7677071e833083baacda615ced9d82b2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "tvkuijik"}, {"hashes": ["044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb"], "key": "<HKCU>\\SOFTWARE\\MGTWTMDC", "value_name": "shhamajg"}, {"hashes": ["044dfb21c444c2095fba7f16d099e4270590319e10e058d908d42c15af2dadfb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "gxullgxc"}, {"hashes": ["bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "key": "<HKCU>\\SOFTWARE\\IPRGAQKN", "value_name": "xburaaug"}, {"hashes": ["bfcb3c1827ef331df32385f195022976978f6fc9bccfa8d5ddf388cbb6703940"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ilfxfavn"}, {"hashes": ["4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679"], "key": "<HKCU>\\SOFTWARE\\TPKECUKU", "value_name": "gaqfookc"}, {"hashes": ["4f74669a05987f18988f86b5317e6e2ef71ff8addfeb24e40a839e44d8702679"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "fbtfbdlj"}, {"hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d"], "key": "<HKCU>\\SOFTWARE\\XLCLFSVG", "value_name": "olqjdhqb"}, {"hashes": ["b704f33b8351b6be06610537db1f6fc26eb41907973f3905dca4f1429763503d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "awklsntk"}, {"hashes": ["8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913"], "key": "<HKCU>\\SOFTWARE\\BVXLNJIT", "value_name": "hbakpvsa"}, {"hashes": ["8cfb9111ef44e6de858a5561ed10df42b0f18fddbb42d3f955ee998a887b5913"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "tsjrmdae"}, {"hashes": ["461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76"], "key": "<HKCU>\\SOFTWARE\\SONIDMOJ", "value_name": "grfgulvd"}, {"hashes": ["461cee0f19d1e8e4699115d7c2eb6f410f694510192a03f82fc634b99cff3b76"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "fpvupbtv"}, {"hashes": ["94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb"], "key": "<HKCU>\\SOFTWARE\\CAGJPKEP", "value_name": "qnehlxvq"}, {"hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7"], "key": "<HKCU>\\SOFTWARE\\EEHXFDNB", "value_name": "gpdnlwlb"}, {"hashes": ["89ed07908b928b6ebda5d85796172643c0012600a6a8b04b75f43e755f85a0f7"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ksusrbtd"}, {"hashes": ["94f49149f9c8e467016a86e0c8b68ddfdf264f0974298a19ae8b7967ce56cbcb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "ediverpj"}, {"hashes": ["daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc"], "key": "<HKCU>\\SOFTWARE\\SAEJKCQV", "value_name": "betkswjr"}, {"hashes": ["daa012f5af87c5dfb15e166e0f35d0774b8789dcf6d3f2284c2a491a629d79dc"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "lsgefnft"}, {"hashes": ["b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849"], "key": "<HKCU>\\SOFTWARE\\VGUGFGQK", "value_name": "vuvrcold"}, {"hashes": ["b1813a4935ce5b84062abc8149e4262fdf282f9dba41f0e48c0edc7a50f4a849"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "srtctlgr"}, {"hashes": ["ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "key": "<HKCU>\\SOFTWARE\\GOUSINNP", "value_name": "anlawrxa"}, {"hashes": ["ed5dcd3bc91e8b9b849f2f3b041088145cccfc262cf976ebf042bbe30adfcfe1"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "kakojkgh"}, {"hashes": ["d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0"], "key": "<HKCU>\\SOFTWARE\\QWCTAHWU", "value_name": "krhbufvh"}, {"hashes": ["d06e2ffeb421403adf448e95a6267d6dca7c62a453bba36f446e36b1db31c3b0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "qdccueli"}]}, "reports_count": 23}, "Win.Dropper.DarkComet-9152539-1": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-packed-upx", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "malware-known-trojan-av", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "artifact-memory-vm-detect", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "process-hollowing-detected", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "malware-darkcomet-detected", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-registry-detected", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-mutex-detected", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": ["TA0003", "T1112"]}, {"bi": "feed-domain-rat", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "mitre_attack_tags": []}, {"bi": "disables-windows-firewall", "hashes": ["7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "network-dns-category-p2psharing", "hashes": ["c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "DarkComet and related variants are a family of remote access trojans designed to provide an attacker with control over an infected system. Capabilities of this malware include the ability to download files from a user's machine, mechanisms for persistence and hiding, and the ability to send back usernames and passwords from the infected system.", "hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "iocs": {"domain": [{"hashes": ["2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07"], "host": "sunnysmith2010s[.]ddns[.]net"}, {"hashes": ["df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "host": "ariffarhads52[.]ddns[.]net"}, {"hashes": ["aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38"], "host": "youssefalsalhi[.]ddns[.]net"}, {"hashes": ["36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac"], "host": "sirnon1956ge[.]ddns[.]net"}, {"hashes": ["9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475"], "host": "brownwhite535[.]ddns[.]net"}, {"hashes": ["c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac"], "host": "infoglass[.]ddns[.]net"}, {"hashes": ["c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac"], "host": "chongliu10[.]chickenkiller[.]com"}, {"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30"], "host": "frankalbertfrank[.]ddns[.]net"}, {"hashes": ["bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9"], "host": "johnmavies[.]ddns[.]net"}, {"hashes": ["dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21"], "host": "mcscottxbanks1[.]ddns[.]net"}], "file": [{"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "path": "%APPDATA%\\dclogs"}, {"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\MSDCSC"}, {"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\MSDCSC\\msdcsc.exe"}], "ip": [{"hashes": ["9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475"], "ip": "193[.]0[.]200[.]186"}], "mutex": [{"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "name": "DC_MUTEX-<random, matching [A-Z0-9]{7}>"}], "registry": [{"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "key": "<HKCU>\\SOFTWARE\\DC3_FEXEC", "value_name": null}, {"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "MicroUpdate"}, {"hashes": ["0ab6f1f0a924a24fe7cd4be79de145437b37c764f7d15752ae4bfba3d4b6fc30", "2a4a6818474c3fa0c9bad627390d3aa88a328555dfbf69fd98101fb2a31c7b07", "36630dd83d6ad6535501ef756a0ea1caa82e8ce8edde8ce71923b552de7ac1ac", "9acfb52bea9cd4daf484f0c75d2993f49fdfcbca48a4ea23ba3d986161b81475", "aea129a9ce8ad2155ed56f416420becac414ce05f46b488d3fe1a074ebf7fd38", "bbc6557af0f5ba77be1f9a044908c984470d4a9da027733e6d04beff98b48fd9", "c5b7f3077a4b94c409ad23738d425f859a570494ea91057a03b20cd623ed9fac", "d00503ed3336862635d035df5154e4f00a2a285374c86465e0b4fdf6ed43bb07", "dd422842c73d48e0ce169617ac989ec9ce41ce6b0be25d1ff8020507c7f21a21", "df4433d1227ccb7c5ff673f8f7082e5c6389fdc088ace5e0b57ae8b7186a55c2"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "UserInit"}, {"hashes": ["7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "EnableFirewall"}, {"hashes": ["7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "DisableNotifications"}, {"hashes": ["7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLUA"}, {"hashes": ["7f689c2190ca8b267927cf91663aa4b67cd6bed80581a496aadf1223a8bc27cb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": null}]}, "reports_count": 11}, "Win.Dropper.Gh0stRAT-9111297-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-service-with-autostart-created", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0003", "T1112", "T1058"]}, {"bi": "currentcontrolset-service-added", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035", "T1060"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "altered-sample-dns-flagged", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "cmd-exe-file-execution", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "modified-file-in-system-dir", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": []}, {"bi": "new-service-launched", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035"]}, {"bi": "cmd-exe-file-deletion", "hashes": ["2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Gh0stRAT is a well-known family of remote access trojans designed to provide an attacker with complete control over an infected system. Capabilities include monitoring keystrokes, collecting video footage from the webcam, and uploading/executing follow-on malware. The source code for Gh0stRAT has been publicly available on the Internet for years, significantly lowering the barrier for actors to modify and reuse the code in new attacks.", "hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "iocs": {"domain": [{"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "host": "1919[.]ali114[.]net"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "host": "cc[.]ip-163[.]com"}], "file": [{"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "path": "%SystemRoot%\\SysWOW64\\<random, matching '[a-zA-Z0-9]{4,19}'>.exe"}, {"hashes": ["3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9"], "path": "%SystemRoot%\\SysWOW64\\kqwkig.exe"}, {"hashes": ["7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "path": "%System32%\\aaaaaa.exe"}, {"hashes": ["39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627"], "path": "%System32%\\nannaa.exe"}, {"hashes": ["dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092"], "path": "%System32%\\dqrhqi.exe"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55"], "path": "%System32%\\uusmuk.exe"}, {"hashes": ["6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba"], "path": "%System32%\\eeosec.exe"}, {"hashes": ["3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a"], "path": "%System32%\\zmhpmg.exe"}, {"hashes": ["3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58"], "path": "%System32%\\hufzuk.exe"}, {"hashes": ["d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc"], "path": "%System32%\\zmdpmg.exe"}, {"hashes": ["4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f"], "path": "%System32%\\ccuwco.exe"}, {"hashes": ["e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9"], "path": "%System32%\\jwzvwy.exe"}, {"hashes": ["9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db"], "path": "%System32%\\wwmiwy.exe"}, {"hashes": ["3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7"], "path": "%System32%\\mmqcmg.exe"}, {"hashes": ["e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e"], "path": "%System32%\\ggiogq.exe"}], "ip": [], "mutex": [{"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "name": "wewiewiierin"}], "registry": [{"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "Description"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": null}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "Type"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "Start"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "ErrorControl"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "ImagePath"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "DisplayName"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "WOW64"}, {"hashes": ["0821363f53ec2a72819d56278c9b39703e05bab22b4e56a0c00db3879cecac55", "2a1a0f7c3d95335b75de8811f6171c831c3f3dade409e63231271badfd3486ed", "39cb44a14da3b712dc0d9510be72b0c66dd36e864b5464a04102b340a0296627", "3cedfc896105c5a9f916300dc0225a7947a70b9002f73c2c8a4cb9b1127a931a", "3df39b7001b5ba14aa05225b5b4296dac86515ae9e977dfa8eb46ed8c6b51c58", "3f9b3a34b35fd6739104dedd638a004cb19b1f9d12a11abea784555574c795a7", "4801659c7f062a938dc6a9328c177b1cf989313f70a1d3d707cf01d06d64504f", "6719677f4d3ab6a5f7061bea53262ec6aa55f1812cdfa1c3c399e8bbcb52bcba", "7f744f6c9a2d2137cbbfa4535ea508e73833246568ff0f7b98a1d1fab6e09221", "9f61d77596bc946a60ce02193c32db7ad07085b0c02727faf3fd277e4bca52db", "d2c81b210d6a3a6c5cf039eb1da34cb06d69603e032930cb7a7cb325d10251cc", "dbf693ab577193960287a484dc6657b9467409087a5796cf01f806ae23c74092", "e3311f3016cf7c6e9cd401a58607a21941017baa4170e19ff41ab233b90bbcd9", "e5f82886762407fe9970385493be1f5f6fcea005ed509c36e745a121341d9c6e", "f3a10671f32560cb433d32caaa8a06a9c89d805a002375a88dad0cd3a5f44611"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WEWIEWIIERIN", "value_name": "ObjectName"}]}, "reports_count": 15}, "Win.Dropper.Tofsee-9108085-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "registry-service-with-autostart-created", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0003", "T1112", "T1058"]}, {"bi": "currentcontrolset-service-added", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035", "T1060"]}, {"bi": "process-long-cmdline", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-communications-smtp", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "dns-query-nxdomain", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-smtp-spambot", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "process-requested-named-pipe", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0004", "TA0005"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "network-dns-category-file-storage", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "listening-port-opened", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "process-svchost-suspicious-launch", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005"]}, {"bi": "localhost-ipaddress-detected", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "registry-large-data-entry", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1112"]}, {"bi": "malware-compound-cta-activity", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "sc-service-start", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035", "T1031"]}, {"bi": "netbios-null-domain", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "file-alternate-data-stream-modification", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005"]}, {"bi": "malware-tofsee-cmd-detected", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "netsh-firewall-generic", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1016", "T1089"]}, {"bi": "sc-service-create", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0003", "T1050"]}, {"bi": "file-alternate-data-stream-creation", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1096"]}, {"bi": "new-service-launched", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035"]}, {"bi": "registry-windows-defender-exclusions-added", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "dns-bypassed-assigned-server", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "netsh-firewall-add", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0011", "TA0005", "T1089"]}, {"bi": "malware-tofsee-domain-detected", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "malware-tofsee-filepath", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0002", "T1105", "T1112"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-smtp-spambot-v2", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-snort-sensitive-data", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "suspicious-user-agent", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-snort-server", "hashes": ["9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2"], "mitre_attack_tags": []}, {"bi": "excessive-tcp-connections", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "windows-utility-downloaded-artifact", "hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-opendns-malicious", "hashes": ["49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "mitre_attack_tags": []}, {"bi": "altered-sample-dns-flagged", "hashes": ["49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "nginx-webserver-detected", "hashes": ["66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-dns-category-phishing", "hashes": ["49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-http-non-standard-port", "hashes": ["66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f"], "mitre_attack_tags": ["TA0011", "TA0005", "T1065"]}, {"bi": "network-communications-http-post", "hashes": ["66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "network-dns-category-parked-domain", "hashes": ["49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b"], "mitre_attack_tags": []}, {"bi": "html-small-file-redirect", "hashes": ["b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3"], "mitre_attack_tags": []}, {"bi": "network-dns-category-new", "hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "mitre_attack_tags": []}, {"bi": "public-ip-address-identification-attempt", "hashes": ["9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22"], "mitre_attack_tags": []}, {"bi": "http-response-server-error", "hashes": ["c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Tofsee is multi-purpose malware that features a number of modules used to carry out various activities such as sending spam messages, conducting click fraud, mining cryptocurrency, and more. Infected systems become part of the Tofsee spam botnet and are used to send large volumes of spam messages in an effort to infect additional systems and increase the overall size of the botnet under the operator's control.", "hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "iocs": {"domain": [{"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "schema[.]org"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "microsoft-com[.]mail[.]protection[.]outlook[.]com"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "252[.]5[.]55[.]69[.]zen[.]spamhaus[.]org"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "252[.]5[.]55[.]69[.]in-addr[.]arpa"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "252[.]5[.]55[.]69[.]bl[.]spamcop[.]net"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "252[.]5[.]55[.]69[.]sbl-xbl[.]spamhaus[.]org"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "252[.]5[.]55[.]69[.]cbl[.]abuseat[.]org"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "252[.]5[.]55[.]69[.]dnsbl[.]sorbs[.]net"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "market[.]yandex[.]ru"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b"], "host": "www[.]google[.]de"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6"], "host": "api[.]sendspace[.]com"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "lh3[.]googleusercontent[.]com"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "static[.]ibsrv[.]net"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "scbfb[.]com"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "www[.]chlaw[.]com[.]cn"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "host": "iv0001-npxs01001-00[.]auth[.]np[.]ac[.]playstation[.]net"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "dehghanidesign[.]ir"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe"], "host": "ip[.]pr-cy[.]hacklix[.]com"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "host": "www[.]google[.]se"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49"], "host": "work[.]a-poster[.]info"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "host": "www[.]off---white[.]com"}, {"hashes": ["20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645"], "host": "service[.]gmx[.]net"}, {"hashes": ["20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645"], "host": "meinaccount[.]gmx[.]net"}, {"hashes": ["23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac"], "host": "ip05[.]gntl[.]co[.]uk"}, {"hashes": ["23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac"], "host": "tube[.]pool[.]gntl[.]co[.]uk"}, {"hashes": ["20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645"], "host": "interception1[.]gmx[.]net"}, {"hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86"], "host": "www[.]google[.]fr"}, {"hashes": ["23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac"], "host": "118[.]151[.]167[.]12[.]in-addr[.]arpa"}, {"hashes": ["49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "host": "video-weaver[.]lax03[.]hls[.]ttvnw[.]net"}, {"hashes": ["20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86"], "host": "www[.]google[.]co[.]uk"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "host": "auth[.]hulu[.]com"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "host": "www[.]hulu[.]com"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "host": "fourdrubber[.]rcg-dev[.]com"}, {"hashes": ["271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "host": "demo[.]i2cmarketing[.]com"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "host": "robokod[.]org"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "host": "golbacom[.]com"}, {"hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "host": "wildchildsoul[.]com"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72"], "host": "www[.]luisaviaroma[.]com"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22"], "host": "api2[.]endclothing[.]com"}, {"hashes": ["bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "host": "halterandreins[.]com"}, {"hashes": ["4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb"], "host": "s1[.]ipinfo[.]pw"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72"], "host": "ganasa[.]com"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c"], "host": "suoinghe[.]com"}, {"hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72"], "host": "yummyk[.]ca"}, {"hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d"], "host": "zhongguocheng[.]com"}, {"hashes": ["4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72"], "host": "orquideasalvaje[.]club"}, {"hashes": ["528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61"], "host": "auth[.]roblox[.]com"}, {"hashes": ["528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2"], "host": "mein[.]web[.]de"}, {"hashes": ["528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2"], "host": "login[.]web[.]de"}, {"hashes": ["528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2"], "host": "interception1[.]web[.]de"}], "file": [{"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "path": "%SystemRoot%\\SysWOW64\\config\\systemprofile"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "path": "%SystemRoot%\\SysWOW64\\config\\systemprofile:.repos"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "path": "%SystemRoot%\\SysWOW64\\<random, matching '[a-z]{8}'>"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "path": "%TEMP%\\<random, matching '[a-z]{8}'>.exe"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61"], "path": "\\Device\\ConDrv"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61"], "path": "%System32%\\config\\systemprofile:.repos"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61"], "path": "%System32%\\<random, matching '[a-z]{8}\\[a-z]{6,8}'>.exe (copy)"}, {"hashes": ["4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645"], "path": "%TEMP%\\ikflerb.exe"}, {"hashes": ["e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6"], "path": "%TEMP%\\jlgmfsc.exe"}, {"hashes": ["e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49"], "path": "%TEMP%\\oqlrkxh.exe"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f"], "path": "%System32%\\iuamwac\\ducakfma.exe (copy)"}, {"hashes": ["49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5"], "path": "%System32%\\fzlpafp\\eqpdoyga.exe (copy)"}, {"hashes": ["4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f"], "path": "%System32%\\emnkxii\\aixbomvv.exe (copy)"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749"], "path": "%TEMP%\\cezfylv.exe"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749"], "path": "%System32%\\mqxtgzi\\cezfylv.exe (copy)"}, {"hashes": ["5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac"], "path": "%System32%\\esuuycp\\usbclhws.exe (copy)"}], "ip": [{"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "239[.]255[.]255[.]250"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "43[.]231[.]4[.]7"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "69[.]55[.]5[.]252"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "85[.]114[.]134[.]88"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "217[.]172[.]179[.]54"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "5[.]9[.]72[.]48"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "130[.]0[.]232[.]208"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "144[.]76[.]108[.]82"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "185[.]253[.]217[.]20"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "45[.]90[.]34[.]87"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "157[.]240[.]18[.]174"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "87[.]250[.]250[.]22"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "104[.]47[.]53[.]36"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "ip": "216[.]239[.]34[.]21"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "104[.]47[.]54[.]36"}, {"hashes": ["157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "104[.]47[.]18[.]97"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b"], "ip": "172[.]253[.]63[.]94"}, {"hashes": ["157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "144[.]160[.]235[.]143"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6"], "ip": "69[.]31[.]136[.]5"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "96[.]114[.]157[.]80"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "67[.]195[.]228[.]84"}, {"hashes": ["1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "104[.]47[.]18[.]161"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc"], "ip": "216[.]239[.]38[.]21"}, {"hashes": ["157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "144[.]160[.]159[.]22"}, {"hashes": ["157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "144[.]160[.]159[.]21"}, {"hashes": ["1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "144[.]160[.]235[.]144"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "68[.]87[.]20[.]5"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "23[.]5[.]227[.]69"}, {"hashes": ["1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "104[.]215[.]148[.]63"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "ip": "40[.]113[.]200[.]201"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "172[.]217[.]2[.]99"}, {"hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "185[.]255[.]55[.]29"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe"], "ip": "163[.]172[.]32[.]74"}, {"hashes": ["157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc"], "ip": "40[.]112[.]72[.]205"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b"], "ip": "23[.]59[.]84[.]59"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b"], "ip": "185[.]177[.]54[.]9"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49"], "ip": "216[.]239[.]32[.]21"}, {"hashes": ["11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "40[.]76[.]4[.]15"}, {"hashes": ["157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49"], "ip": "193[.]252[.]22[.]65"}, {"hashes": ["20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6"], "ip": "217[.]160[.]153[.]90/31"}, {"hashes": ["11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "157[.]245[.]5[.]40"}, {"hashes": ["20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6"], "ip": "82[.]165[.]230[.]24/31"}, {"hashes": ["11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "ip": "66[.]171[.]248[.]178"}, {"hashes": ["2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "ip": "216[.]239[.]36[.]21"}, {"hashes": ["11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "ip": "157[.]240[.]18[.]15"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc"], "ip": "37[.]28[.]155[.]134"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86"], "ip": "104[.]47[.]18[.]225"}, {"hashes": ["0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49"], "ip": "37[.]1[.]217[.]172"}, {"hashes": ["1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9"], "ip": "104[.]47[.]14[.]33"}, {"hashes": ["11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac"], "ip": "209[.]85[.]201[.]104/31"}], "mutex": [], "registry": [{"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": null}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": null}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Type"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Start"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ErrorControl"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "DisplayName"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "WOW64"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ObjectName"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Description"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": "Config2"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": "Config0"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa", "321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": "Config1"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749", "0b7b8aa9b01f21422a6e11b0b1e737cc4f70c1b5995ddf143400dab7652cf15f", "157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3", "1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "38c58dc49ded3ac66a59b4f22e630366224f0b1c38a45f2cd79a0d3eb605a9f1", "4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "9621db6675675dd91d51822457910e28ca63277f9f3ac623cb65c628ba8fd282", "a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ImagePath"}, {"hashes": ["13df38fb64d3cc3863c6c0e1b0e3c6e645f998460a10e8e7c213c7054f142c1b", "64909a2c1d734c3d03ceb5ca5fb667ea050bdb75994c813ffb24684c9a4d6c61", "7c74090cd323a7be86ca8e0db7fa62e850333607d04e26588d235350599914e2", "a106664b48b8352ab820ce0eaafb0a02105b351294d1dc5e7c801806b05c323c", "c88e2c1ced277184462ce9633bcde03fe89a683304cd056c9d913a782c049ee8", "dd04e43289718e1ecfd0c6426c56432bfff910cd66a18b98eece89b2b7d018d8", "e6b4e53a220f4376c07f6d1db1f9e40eedbe46149dad3ce46bfb9d04dd40e9bc"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\kdrxwekz"}, {"hashes": ["752bddb87946eefff829ab17c7498b91c0984780c0f7d4641a4cb70cea0ed003", "b744f3b238d8f5cb25ee0dd646adeb365c2316d691aa09fc0452a5566a2b0a5c", "d55da38ee02b3fb8c683044644b01eb2aa6c0165edddbdf44f9d93ff23062d86", "e375b30b71dbafd270a7c0427fa95a192851546b1260128bab54a9e8b4a250f6", "f82adaaa948575d43e7ca974f3fb7c471e6910f750cafc583006ccf0c1890de4"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\unbhgouj"}, {"hashes": ["66552cb947577aee15440fa8149faa16d32ef1e2e9ed8ecc285e73dbd903e1f9", "8059caf89e93276ae54468090a2b34c4e1cbf13a0991b2fcf182d63d85996377", "c9b39db14af37af07fb52b8c18dd92316651c3ea4946c579f718dc501d90bbe0", "e6366c1f84e5d836ca50f85ebdf2f88ed75f28532ad374d7c0584f47a9868c49", "ebec67ac71478b488cf90af698c6e7f2889140e7a090674c71bc84bb481b41f7"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\gzntsagv"}, {"hashes": ["3cf9db4180891a66f828e37da4cdf479c5b1eb121ff6cafb376bae57188d168f", "70df764882ecb499e0bd20d26cf60e10bdd459e23ebde29f2c287c313602b7fb", "d3eaf1c549f5245946b9a7f3d1211933e52bf63f2232b10344c88fc9f5fba9bb", "f45aabe880606adf79345cce619e24109a7274dbfbf57d1faaee13141ee33422"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\buionvbq"}, {"hashes": ["528602c950a711c896751c00fc67ed96daef0d1ea67991e1b75ee9526ce7c8f2", "743d04c88624fece889a2c28df8a0e2133da4c9583ba80b36bc3828262d672aa", "bed5d9c1c5f6dc3c5fd9f80d77c9260435239c01bae715916262ea1393457645", "d52bce098c0f8ea9773de1c4f9c2e941ead3eb282f0eef7e2a93e6ca15502abe"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\dwkqpxds"}, {"hashes": ["23f09c4fbfcf588ebf431e453586ffe5466f3c64349a2dfbece2f5a7acc757b3", "51e3d361c62316d2ecc78b3a68783ad3bf27ff269a645ee53d163fd94d14c145", "ec05bbd07a06e7450fed7c3d14c6484bb93993b3692132d482395d3c4e1d7b1b"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\tmagfnti"}, {"hashes": ["321406a35c6de90c3c8f195d0cdeeef212d604e9efb7331b813626d77e032c97", "bbe883792a4e49c8747916a2f4173fe8cde85ff73ab71fdd7532b5d1dc6e7e72", "ca59aaaa190e03b9ebeadcf5e166c9a4b8fbca113e65544ca52393f9766a8402"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\slzfemsh"}, {"hashes": ["11e0864b5ee9d87a8288914d15a47eb88e1d65e87893aec43320639535765639", "271a926daa5ad7b924c00a35c5da9c3250f51912301b9f04769e0e9e3d4d2650", "c520ad78be04e31324bcc742017efe3b1205c68753a962b2c376f96f1bbadb69"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\rkyedlrg"}, {"hashes": ["4bf53db8ab52e0728a2cc6ef34df33dca9de0a302bc9ccc3ee830d92209a63d0", "580d6eafce7f349f112a4fa4e040589c84c0c3dc9b60b190f0ce53b954c3fc8f", "67e192a92b65f07d2dc474c5bdc5eb0883bb42f28777e3cab12baff319a3b67d"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\qjxdckqf"}, {"hashes": ["157a7940a3fe8bd376da1d7ade7a8ff8d39672b425f8cab07b42263cc318232f", "4d2d506c39db4d0a97f021424b5734005967ab8734e0c6202059866aa4c03bc6"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\ibpvucix"}, {"hashes": ["20df9f32f64bfe0e6ce590667c85f2e1178bddfd3fb7e76c37266c02a96625a3", "91e617f2ecec09c47ceeb94d2a5526220eb692a5f6fcba9e9fae1f279e4c5b86"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\haoutbhw"}, {"hashes": ["1d4021d1d390e898ebb650ba10661ef42d1118c153293c8b004aca89f985c279", "9f226440df7a9a365e09a7f8ab975789eeb5bff5d125e82fce43cd4e66366a22"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\exlrqyet"}, {"hashes": ["28c40764ff816f0d7515f023ec04e966ac2bb17bc3579db0ec901918d2cc1df3", "2d76efc97b399399beb18a78574f4bc62bfb9b3a8fe1e50913e006e7d9eb7dfa"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\jcqwvdjy"}, {"hashes": ["00e90aa8228e83e112f72fb1718215979e89194f3604f5420635fb57ea57460e", "ed16258d7acc50053c75e2183a51e7a4431b247a6649956cfa8cebb836fc3db2"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\piwcbjpe"}, {"hashes": ["5ebc0d79847a0afc7fa4b912c8e19fbdf512116f9792f40aa734ff862ae5f8ac", "c591d23b81aef0a35731d513df1357d6e174cd99c10ce44a6c0b4cab51a26972"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\lesyxfla"}, {"hashes": ["4972b784201f9cc9bb8dcae4f13b5305873516eb172bff7a9225f91265e4bf4f", "9166d8cc10950c9504e702d4dcd4bd1d4c799a88ae8449f2b21533cf9c6cb53a"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\yrflksyn"}, {"hashes": ["49b5678d6e49e6e4b3bb194330e6beac78d83faec56798297652b05e787cbac5"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\fymsrzfu"}, {"hashes": ["a9eb44f03e38dcf67869346f05003a21bbdd31613853a0d5ec0860cf1f03d312"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\xqekjrxm"}, {"hashes": ["1c811bc3c086fb32f19db792df567392633c66a09001e0bb69438f775f92cbc3"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\cvjpowcr"}, {"hashes": ["053c849c8bb19f98cdf0df36c9c0aed5dd07b31c28449239622bfd106f7d9749"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\ohvbaiod"}]}, "reports_count": 58}, "Win.Malware.AgentTesla-9093590-1": {"bis": [{"bi": "antivirus-service-flagged-artifact", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "5a5517e1382046c937b2562ce39d006f6ee7976ac7eab4f5df154c2ff0bfcfe7", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "5a5517e1382046c937b2562ce39d006f6ee7976ac7eab4f5df154c2ff0bfcfe7", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "5a5517e1382046c937b2562ce39d006f6ee7976ac7eab4f5df154c2ff0bfcfe7", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "pe-tls-callback", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "5a5517e1382046c937b2562ce39d006f6ee7976ac7eab4f5df154c2ff0bfcfe7", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "5a5517e1382046c937b2562ce39d006f6ee7976ac7eab4f5df154c2ff0bfcfe7", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "pe-section-shared", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "5a5517e1382046c937b2562ce39d006f6ee7976ac7eab4f5df154c2ff0bfcfe7", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-file-in-user-dir", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "modified-executable", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "file-ini-read", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "enumeration-browser-information", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1217"]}, {"bi": "file-alternate-data-stream-modification", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005"]}, {"bi": "file-alternate-data-stream-creation", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005", "T1096"]}, {"bi": "file-alternate-data-stream-zero-data", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005"]}, {"bi": "windows-vault-api", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "unsigned-roaming-execution", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0005"]}, {"bi": "startup-folder-modification", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "artifact-flagged-malware", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "mitre_attack_tags": []}, {"bi": "malware-agent-tesla-detected", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "mitre_attack_tags": ["TA0009", "T1123", "T1125", "T1056"]}, {"bi": "malware-agent-tesla-av-detected", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "mitre_attack_tags": ["T1219"]}, {"bi": "files-created-vbs", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0002", "T1064"]}, {"bi": "startup-folder-vbs-file", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "malware-known-trojan-av", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308"], "mitre_attack_tags": []}, {"bi": "file-pending-delete", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "malware-agent-tesla-filepath-detected", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "mitre_attack_tags": ["TA0009", "T1123", "T1125", "T1056"]}, {"bi": "malware-generic-infostealer", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "malware-lokibot-mutex-detected", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-data-dir", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-autorun-key-modified", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "netbios-query", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08"], "mitre_attack_tags": []}, {"bi": "process-check-ucbrowser", "hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "mitre_attack_tags": ["TA0007"]}, {"bi": "network-opendns-malicious", "hashes": ["2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "network-file-uploaded", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-communications-http-post", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "http-response-client-error", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": []}, {"bi": "suspicious-user-agent", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "malware-guloader-traffic-detected", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "compiler-vbc-run", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "mitre_attack_tags": ["TA0005", "T1500"]}, {"bi": "malware-hawkeye-detected", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "mitre_attack_tags": []}, {"bi": "dot-net-process-hollowing-detected", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "altered-sample-dns-flagged", "hashes": ["8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "malware-azorult-mutex-detected", "hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8"], "mitre_attack_tags": []}, {"bi": "network-http-numeric-ip", "hashes": ["61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6"], "mitre_attack_tags": ["TA0011", "TA0005", "T1071"]}, {"bi": "network-fast-flux-domain", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "artifact-memory-vm-detect", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "process-check-opera-appdata-folder", "hashes": ["2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "mitre_attack_tags": ["TA0007", "T1083"]}, {"bi": "process-check-browser-mail-client-files", "hashes": ["2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "mitre_attack_tags": ["TA0007"]}, {"bi": "network-communications-http-get", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": []}, {"bi": "listening-port-opened", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "network-http-blank-user-agent", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "public-ip-address-identification-attempt", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc"], "mitre_attack_tags": []}, {"bi": "nginx-webserver-detected", "hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": []}, {"bi": "network-dns-malicious-snort", "hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": ["TA0011"]}, {"bi": "altered-sample-snort-flagged", "hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "network-dns-upload-file", "hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "mitre_attack_tags": []}, {"bi": "pe-uses-armadillo", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-snort-protocol", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "files-deleted-used-batch", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "cmd-exe-file-execution", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "pe-imports-toolhelp", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "process-uses-localhost-traffic", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0005"]}, {"bi": "process-ping", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0011", "TA0007", "T1049"]}, {"bi": "process-ping-localhost", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0011", "TA0007", "T1016"]}, {"bi": "malware-remcos-mutex", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "malware-remcos-path", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": []}, {"bi": "malware-remcos-registry", "hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "mitre_attack_tags": ["TA0009", "TA0006", "TA0011", "TA0008", "T1056", "T1113", "T1125", "T1123", "T1105"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "AgentTesla is a Remote Access Trojan that records keystrokes and attempts to steal sensitive information from web browsers and other installed applications.", "hashes": ["00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b", "273cee564d8486089dea169f9ce2680ef2ad8c73a9568c573520f281cc9c8e1b", "2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5a5517e1382046c937b2562ce39d006f6ee7976ac7eab4f5df154c2ff0bfcfe7", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6", "be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b", "cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "iocs": {"domain": [{"hashes": ["4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41"], "host": "siiigroup[.]com"}, {"hashes": ["11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc", "2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8"], "host": "waresustem[.]live"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "host": "whatismyipaddress[.]com"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "host": "passwrdboss[.]duckdns[.]org"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "host": "smtp[.]enginelogs[.]top"}, {"hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "host": "clotiahs[.]info"}, {"hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84"], "host": "deborahdell[.]xyz"}], "file": [{"hashes": ["00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\dth54.vbs"}, {"hashes": ["00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "path": "%APPDATA%\\dth54"}, {"hashes": ["00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "path": "%APPDATA%\\dth54\\smgu.exe"}, {"hashes": ["00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "path": "%APPDATA%\\dth54\\smgu.exe:ZoneIdentifier"}, {"hashes": ["12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff"], "path": "%TEMP%\\<random, matching '[0-9]{15}'>000_<random GUID>.db"}, {"hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41"], "path": "%APPDATA%\\D282E1"}, {"hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41"], "path": "%APPDATA%\\D282E1\\1E80C5.lck"}, {"hashes": ["5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff"], "path": "%APPDATA%\\MyApp"}, {"hashes": ["5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff"], "path": "%APPDATA%\\MyApp\\MyApp.exe"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "path": "%APPDATA%\\remcos\\logs.dat"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "path": "%APPDATA%\\remcos\\remcos.exe"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "path": "%APPDATA%\\pid.txt"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "path": "%APPDATA%\\pidloc.txt"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "path": "%TEMP%\\install.bat"}, {"hashes": ["463cca46948a4dca20f30b5069cc3d225db37903d2590934c67f09577811a8e9"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\I.exe"}, {"hashes": ["2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335"], "path": "%TEMP%\\FB_EA70.tmp.exe"}, {"hashes": ["2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335"], "path": "%TEMP%\\FB_F318.tmp.exe"}, {"hashes": ["2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb"], "path": "%TEMP%\\dbd1972e-0d99-c59b-cceb-15f2f6d04224"}, {"hashes": ["2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb"], "path": "%TEMP%\\tmpBFF7.tmp"}, {"hashes": ["2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb"], "path": "%APPDATA%\\bobialfj\\bobhg.exe"}, {"hashes": ["80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78"], "path": "%TEMP%\\FB_1B9D.tmp.exe"}, {"hashes": ["80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78"], "path": "%TEMP%\\FB_1DB1.tmp.exe"}, {"hashes": ["5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d"], "path": "%TEMP%\\FB_7B97.tmp.exe"}, {"hashes": ["5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d"], "path": "%TEMP%\\FB_7E27.tmp.exe"}, {"hashes": ["12371b49f34be1ef8a10f8a5a4b4569753d1abd354ecebd437d18c684f97b22f"], "path": "%APPDATA%\\slimialfj\\slilhg.exe"}, {"hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21"], "path": "%TEMP%\\FB_6B62.tmp.exe"}, {"hashes": ["a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21"], "path": "%TEMP%\\FB_6D75.tmp.exe"}, {"hashes": ["d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "path": "%TEMP%\\FB_9925.tmp.exe"}, {"hashes": ["d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "path": "%TEMP%\\FB_9DE7.tmp.exe"}, {"hashes": ["b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "path": "%TEMP%\\24a71b76-ecf3-bd4a-dd40-87ecb05f2248"}, {"hashes": ["b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "path": "%TEMP%\\tmp4645.tmp"}, {"hashes": ["b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff"], "path": "%TEMP%\\FB_C13E.tmp.exe"}, {"hashes": ["b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff"], "path": "%TEMP%\\FB_C3AF.tmp"}, {"hashes": ["b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "path": "%APPDATA%\\mavzalfj"}, {"hashes": ["b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff"], "path": "%TEMP%\\FB_C3AF.tmp.exe"}, {"hashes": ["b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "path": "%APPDATA%\\mavzalfj\\mavhg.exe"}, {"hashes": ["b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "path": "%APPDATA%\\mavzalfj\\mavhg.exe:ZoneIdentifier"}, {"hashes": ["9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb"], "path": "%APPDATA%\\kakanalfj"}, {"hashes": ["9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb"], "path": "%APPDATA%\\kakanalfj\\kakabg.exe"}, {"hashes": ["9111250ffe19fa7d428f3cfa75e51285ef2fb5829e236cd33318c2e1fec0e2eb"], "path": "%APPDATA%\\kakanalfj\\kakabg.exe:ZoneIdentifier"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "path": "%APPDATA%\\arinzalfj"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "path": "%APPDATA%\\arinzalfj\\arinhg.exe"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "path": "%APPDATA%\\arinzalfj\\arinhg.exe:ZoneIdentifier"}, {"hashes": ["629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96"], "path": "%TEMP%\\FB_A1BE.tmp"}, {"hashes": ["629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96"], "path": "%TEMP%\\FB_A1BE.tmp.exe"}, {"hashes": ["629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96"], "path": "%TEMP%\\FB_A68F.tmp"}, {"hashes": ["629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96"], "path": "%TEMP%\\FB_A68F.tmp.exe"}], "ip": [{"hashes": ["00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c"], "ip": "51[.]68[.]128[.]171"}, {"hashes": ["5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a"], "ip": "51[.]89[.]183[.]99"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "ip": "192[.]169[.]69[.]25"}, {"hashes": ["417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0"], "ip": "198[.]54[.]117[.]198"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "ip": "104[.]16[.]155[.]36"}, {"hashes": ["1c6114c19a491ca663c5f23831e1a1a755049d115d40206fd54402e295bdef2b"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["cd1b09f7106f7cb69e00310b6d27f32afc3c1cba69725ed38c397e7ced444133"], "ip": "79[.]134[.]225[.]41"}, {"hashes": ["49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4"], "ip": "206[.]217[.]131[.]227"}], "mutex": [{"hashes": ["00a3928a1fe9e3e38764778d756e594f1193d1a745cccb5edc88b36ce4857deb", "378cded475807d8412154512917c5df4689be5d7e989bc79e11f46f823da2308", "417fa655f6ef37eede2cad99d78506042339cfcc395e1a07d5d0b6f5418398b0", "4322cb9580767733bb8d065026202ff21b71763bcf3895687e39cad98383ca08", "49616fb7eddddb9bc1ee808f13a3319860d56f25f44a3531c97144b51dbba8e4", "5ac2a744a7aae544c29971d5546d2916fa850c2b5eea864587c6e800185e4cf6", "61befc51377cb1d95b19f287ec678cc6dc4291bfe7575f3639cad943aa08586a", "8539107c0bd3d3f7aa0327d09331d48e131d5e7ffe336f7765ae64c466d4868c", "8bdb47941147076816fc7bfaa4067f1f0ce7a605b7810bf38d11f58a237afa41"], "name": "3749282D282E1E80C56CAE5A"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "name": "Remcos_Mutex_Inj"}, {"hashes": ["6f35093d486c2d85d6a664fab8a986a7fcc1bff06dbfe62595652baf71104b84"], "name": "A16467FA-7343A2EC-6F235135-4B9A74AC-F1DC8406A"}, {"hashes": ["2b20fb7784f8aeea0a3fedb16f49c08a8482c8373b5c6d5cbe5171ac5efc6fc8"], "name": "A16467FA7-343A2EC6-F2351354-B9A74ACF-1DC8406A"}, {"hashes": ["2a063841d3e6028a85bc37b76ef418e3d65082064c3a596a99b1e077cebca1eb"], "name": "4f444b86-60f0-4ef5-ac81-fd992cbc807c"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "name": "remcos_zskvavxxkbetkgq"}, {"hashes": ["11d0efa0003760e0ce44d0c414a55cad993edcac8bf870ce299ec15eea53cedc"], "name": "Global\\8dc26c01-ceab-11ea-887e-00501e3ae7b6"}, {"hashes": ["b8ea36b50ef8fb6fb6923174aee79783d04b950b6c98d42755eea76078fca1a6"], "name": "66b3f2e7-3ec9-4459-8212-0ed3ccdde8a3"}], "registry": [{"hashes": ["2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER", "value_name": null}, {"hashes": ["2e13710ff64cce32db611cf9450414f2ebb92ae46e4cb85ad3902d682cb03335", "5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff", "d952912506e0d27d8506c188e93bf1ae3d47838d3c406f76c728c6cf3bff9210"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER", "value_name": "PendingFileRenameOperations"}, {"hashes": ["5073d17032b763f14ac3c50ee84ea4f21099bbe8ff06ffd9ed3e1f56f8f4d33d", "629b89a76f8836b86b2603ac5c06a6724114bad49d9b9e4bfecdae2307b31b96", "80466bbca37e66d4b3e228f7838f02b2a5b9ec782030471ef3879b2deac83b78", "a92236e269b55c548009400ee5572606a07d12256d9050fbf356a12e742a0a21", "b2e607b3ef3aa754884192dd34415adc076c0045d677fcf9e893c7005f2ebeff"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "MyApp"}, {"hashes": ["be24622568ee266530d2db1faef4dee76d9f7f4b2ca3bcc30532a482624e6a8b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\ADVANCED", "value_name": "Hidden"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "remcos"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "key": "<HKCU>\\SOFTWARE\\REMCOS_ZSKVAVXXKBETKGQ", "value_name": "EXEpath"}, {"hashes": ["80a51bcc22ff1bfaa0f7af863034b6ceedf5db8e1d7a14506f284e7190c46c46"], "key": "<HKCU>\\SOFTWARE\\REMCOS_ZSKVAVXXKBETKGQ", "value_name": null}]}, "reports_count": 30}, "Win.Ransomware.Cerber-9142650-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "hook-installed", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "excessive-udp-connections", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}, {"bi": "randomly-named-files", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "document-decoy-dropped", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "malware-ransomware-cerber", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "netsh-firewall-generic", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1016", "T1089"]}, {"bi": "feed-domain-ransomware", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "decoy-wpfv", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0001", "T1193"]}, {"bi": "microsoft-block-rule-list-app-executed", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "windows-speech-api", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0040", "T1491"]}, {"bi": "pdf-password-protected", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-deletes-many-files", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "malware-generic-infostealer", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}, {"bi": "enumeration-cryptocurrency-information", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1145"]}, {"bi": "enumeration-email-program-information", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1114"]}, {"bi": "rtf-appended-data", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "rtf-high-entropy", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "netbios-query", "hashes": ["0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-nameserver", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c"], "mitre_attack_tags": []}, {"bi": "network-file-downloaded-to-disk", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902"], "mitre_attack_tags": []}, {"bi": "benign-process-has-child", "hashes": ["42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148"], "mitre_attack_tags": ["TA0005", "T1055"]}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Cerber is ransomware that encrypts documents, photos, databases and other important files. Historically, this malware would replace files with encrypted versions and add the file extension \".cerber,\" although in more recent campaigns, other file extensions are used.", "hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "iocs": {"domain": [{"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "host": "api[.]blockcypher[.]com"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14"], "host": "btc[.]blockr[.]io"}, {"hashes": ["018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "host": "hjhqmbxyinislkkt[.]13eymq[.]top"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14"], "host": "chain[.]so"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14"], "host": "bitaps[.]com"}, {"hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c"], "host": "hjhqmbxyinislkkt[.]1j9r76[.]top"}, {"hashes": ["e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14"], "host": "hjhqmbxyinislkkt[.]1bxzyr[.]top"}, {"hashes": ["e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14"], "host": "sochain[.]com"}], "file": [{"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%TEMP%\\d19ab989\\4710.tmp"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%TEMP%\\d19ab989\\a35f.tmp"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows\\WebCache\\WebCacheV01.tmp"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\10_147_20121129071628.RTF"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\127SYLLABUSFA07.PDF"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\13ACX.PDF"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\143.PDF"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\15_DIPLOMSKI2006.RTF"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\167_VAN_OORD_V_THE_PORT_OF_.PDF"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\1_ANKITAMISHRA_ESSAY.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\2329444014.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\2590OTHERSUPPORT.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\2Q37_DELETIONS_FTNW.PDF"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\46_DSENV.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\5PROTE_SL45_S.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\AT_DOM_E.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\B813B53525710DA882C4D06A52.XLSX"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\CONTRACTAPPENDIXB.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\DC546113F9030F161A90B734F3.XLSX"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\ERSD200502_E.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\F490F81ED03E44A1E7B5C86E19.XLSX"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\GOOGLE_CORPORATION_KHOTSO_.DOCX"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\HUNJA2B3_E.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%HOMEPATH%\\Documents\\IATA_OMC_TOURISM.DOC"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%TEMP%\\~PI<random, matching [A-F0-9]{2,4}>.tmp"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%TEMP%\\tmp<random, matching [A-F0-9]{1,4}>.tmp"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%TEMP%\\tmp<random, matching [A-F0-9]{1,4}>.bmp"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "<dir>\\_READ_THIS_FILE_<random, matching [A-F0-9]{4,8}>_.hta"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "<dir>\\_READ_THIS_FILE_<random, matching [A-F0-9]{4,8}>_.txt"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "<dir>\\_READ_THIS_FILE_<random, matching [A-F0-9]{4,8}>_.jpeg"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "%TEMP%\\<random, matching [a-z0-9]{8}\\[a-f0-9]{4}>.tmp"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "path": "<dir>\\<random, matching [A-Z0-9\\-]{10}.[A-F0-9]{4}> (copy)"}], "ip": [{"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "149[.]202[.]64[.]0/27"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "149[.]202[.]122[.]0/27"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "149[.]202[.]248[.]0/25"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "178[.]128[.]255[.]179"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b"], "ip": "52[.]21[.]132[.]24"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "54[.]87[.]5[.]88"}, {"hashes": ["018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "193[.]169[.]135[.]155"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b"], "ip": "104[.]20[.]21[.]251"}, {"hashes": ["018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b"], "ip": "172[.]67[.]157[.]138"}, {"hashes": ["0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "104[.]24[.]105[.]254"}, {"hashes": ["14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14"], "ip": "104[.]20[.]20[.]251"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "104[.]16[.]148[.]172"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "104[.]16[.]152[.]172"}, {"hashes": ["0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "ip": "172[.]67[.]2[.]88"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "104[.]16[.]150[.]172"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "104[.]16[.]149[.]172"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e"], "ip": "104[.]24[.]104[.]254"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "104[.]25[.]47[.]99"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "104[.]25[.]48[.]99"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "104[.]16[.]151[.]172"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "198[.]211[.]122[.]103"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f"], "ip": "188[.]226[.]138[.]244"}, {"hashes": ["e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14"], "ip": "104[.]26[.]15[.]247"}], "mutex": [{"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "14de53a89e8243ad7ea829c0f81b2f05fe9989849588489e1494f336a2211c4c", "1854d7d4bc91b4a09c6b4a13242613b34ea86e4b230db1d284db95df4d48084f", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "42d1bfbe6822f58378265f6264a951ac99717bdd7e47e848373b1a6bbc0d6148", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "b60237f6ce542663d3e1d6b62731ab1e08c478e6b27fa4f6ff1f527c8c002be7", "c82b6f79752806e3c0bb9f698eba969aa339c8f9e2e6c9a6be0146fa73e1d658", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902", "e57cf698b7ee17408847ac5dfca29ac6751c379c593c765707262e8392872e14", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "name": "shell.{381828AA-8B28-3374-1B67-35680555C5EF}"}, {"hashes": ["018d893ffd6b7615345abd9cbfc902dde6bbe115804828806ee97901e36c755c", "018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "03730a72ddac7691ae779bb83257f3b3f6b46d66546f994a60ef23fa33593928", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "0d50c47acf25f10775ae42f795898e51cda4b490e5d03489b33d7e5592bd9699", "33a6725dd2d52664fbec1d8507229927842fcdc60977110e8a9f30eaee4158b5", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "d5feb64ca7831b06aa48d592245afb0279756e7dcd971299a8c7194a3453506f", "e6f7a66a2db4b2c69d1feaacc3be165a77bb1c3e3d62ed2c5951c1ffad9f459b", "f2d99dfe698d84c007f72b711f5a0308ae9ff184fab2a217fa84df22eb1187c4"], "name": "shell.{<random GUID>}"}, {"hashes": ["018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902"], "name": "Local\\HKEY_LOCAL_MACHINE_SOFTWARE_Microsoft_Speech_AudioOutput_TokenEnums_MMAudioOut_{0.0.0.00000000}.{7bfc7233-d738-4ab8-aafa-ce95fe369e4a}_Mutex"}, {"hashes": ["018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902"], "name": "Local\\Mutex-0SpWaitObj-HKEY_LOCAL_MACHINE-SOFTWARE-Microsoft-Speech-AudioOutput-TokenEnums-MMAudioOut-{0.0.0.00000000}.{7bfc7233-d738-4ab8-aafa-ce95fe369e4a}"}, {"hashes": ["018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902"], "name": "Local\\Mutex-1SpWaitObj-HKEY_LOCAL_MACHINE-SOFTWARE-Microsoft-Speech-AudioOutput-TokenEnums-MMAudioOut-{0.0.0.00000000}.{7bfc7233-d738-4ab8-aafa-ce95fe369e4a}"}, {"hashes": ["018e7acce9f9fc7d20027237d0330a8a83a754b942c99c91e746dc889239ef64", "0cab75ffb5135950be5490997f051340e45ef14e25974b03b91bb3507a466313", "426f91dbe8e040045a8b7f77aef19b07df5bdd0bea4354d58a490219a5855fcf", "734c3a31f4d2c5c0d906e55e7bc6437e58bac4a9229162cb8c21ed446d18bb0e", "dd731cd498dbf94bb451450524430426f61e1e0329decfbb30f3bc68ca6c8ea4", "e461c18fb97049fce2a9476f27d51e3c9a0b649c57090896913ce4210c9e6902"], "name": "Local\\Mutex-2SpWaitObj-HKEY_LOCAL_MACHINE-SOFTWARE-Microsoft-Speech-AudioOutput-TokenEnums-MMAudioOut-{0.0.0.00000000}.{7bfc7233-d738-4ab8-aafa-ce95fe369e4a}"}], "registry": []}, "reports_count": 19}, "Win.Ransomware.TeslaCrypt-9105565-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-opendns-malicious", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-snort-policy", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "nginx-webserver-detected", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "pe-uses-armadillo", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "network-dns-category-parked-domain", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "enumeration-browser-information", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1217"]}, {"bi": "network-dns-category-proxy", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "altered-sample-dns-flagged", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "registry-autorun-key-modified", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "potential-registry-persistence", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "network-dns-upload-file", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "http-response-redirect", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "process-hollowing-detected", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "startup-folder-modification", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "excessive-file-modifications", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "process-check-browser-mail-client-files", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0007"]}, {"bi": "command-deleted-shadow-copy", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1490"]}, {"bi": "malware-generic-ransomware-entropy", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "malware-generic-ransomware-backup-del", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "feed-domain-ransomware", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-deletion", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "malware-generic-ransomware-notes", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "firefox-prefs-modified", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0009"]}, {"bi": "recycler-file-creation", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-generic-ransomware", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "process-read-ie-cookies", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}, {"bi": "bcdedit-ignore-failure", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "TA0003", "T1490"]}, {"bi": "process-deletes-many-files", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "malware-ransomware-teslacrypt-31", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "artifact-multiple-extensions", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "html-small-file-redirect", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "possible-privilege-escalation-detected", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": ["TA0004", "T1068"]}, {"bi": "malware-generic-infostealer", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}, {"bi": "enumeration-email-program-information", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1114"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-russian", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "pe-imports-psapi-dll", "hashes": ["a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "modified-file-on-usb", "hashes": ["71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": ["TA0011", "T1092"]}, {"bi": "pe-invalid-checksum", "hashes": ["cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "unsigned-roaming-execution", "hashes": ["cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0"], "mitre_attack_tags": ["TA0005"]}, {"bi": "process-requested-named-pipe", "hashes": ["71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": ["TA0004", "TA0005"]}, {"bi": "process-with-multiple-children", "hashes": ["71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": ["TA0005"]}, {"bi": "decoy-wpfv", "hashes": ["71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": ["TA0001", "T1193"]}, {"bi": "network-fast-flux-domain", "hashes": ["49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9"], "mitre_attack_tags": []}, {"bi": "network-snort-sensitive-data", "hashes": ["27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f"], "mitre_attack_tags": []}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "TeslaCrypt is a well-known ransomware family that encrypts a user's files with strong encryption and demands Bitcoin in exchange for a file decryption service. A flaw in the encryption algorithm was discovered that allowed files to be decrypted without paying the ransomware, and eventually, the malware developers released the master key allowing all encrypted files to be recovered easily.", "hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "iocs": {"domain": [{"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "gmpg[.]org"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "en[.]wikipedia[.]org"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "www[.]torproject[.]org"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "dd7bsndhr45nfksdnkferfer[.]javakale[.]at"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "hnb[.]net"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "chonburicoop[.]net"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "www[.]passlift[.]com"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "ladiesdehaan[.]be"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "passlift[.]com"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "firecheerleaders[.]fr"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "actionpourisrael[.]com"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "www[.]hnb[.]net"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "yy46bdff329hfbcjhbme2f[.]evertmazic[.]com"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "host": "perc54hg47fhnkjnfvcdgvdc[.]clinkjuno[.]com"}, {"hashes": ["71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da"], "host": "api[.]w[.]org"}, {"hashes": ["71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da"], "host": "sample-data[.]kallyas[.]net"}], "file": [{"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ko.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ku-ckb.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ku.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ky.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\lij.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\lt.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\lv.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mk.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mn.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mng.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mng2.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\mr.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ms.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nb.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ne.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nl.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\nn.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pa-in.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pl.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ps.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pt-br.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\pt.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ro.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ru.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sa.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\si.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sk.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sl.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sq.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sr-spc.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sr-spl.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\sv.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ta.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\th.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\tr.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\tt.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\ug.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\uk.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\uz.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\va.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\vi.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\yo.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\zh-cn.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\Lang\\zh-tw.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\License.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%ProgramFiles%\\7-Zip\\readme.txt"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "path": "%APPDATA%\\<random, matching [A-Fa-z0-9]{5,8}.exe"}], "ip": [{"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "ip": "23[.]236[.]62[.]147"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "ip": "222[.]165[.]133[.]242"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "ip": "27[.]254[.]87[.]155"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "ip": "217[.]116[.]196[.]239"}], "mutex": [{"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "name": "__sys_234238233295"}], "registry": [{"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\16000009", "value_name": "Element"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\250000E0", "value_name": "Element"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLinkedConnections"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\16000041", "value_name": null}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\16000041", "value_name": "Element"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\16000020", "value_name": null}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\16000020", "value_name": "Element"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\16000040", "value_name": null}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\16000040", "value_name": "Element"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{926583E4-EF64-11E4-BEED-D6738078AD98}\\ELEMENTS\\250000E0", "value_name": null}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKCU>\\SOFTWARE\\XXXSYS", "value_name": null}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.CHECK.0", "value_name": "CheckSetting"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKCU>\\SOFTWARE\\XXXSYS", "value_name": "ID"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "1qwqwqe-r213"}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": null}, {"hashes": ["026b57bdb58644faccd1d42421ae32b3ec45e6c1cdab3dccecbeec1ed306af5f", "06ab6b08d104754f9a16c877a9ff71369cb677a36ac97f580359b31ffa0801e0", "27240a98c8667325bf9e5b62cef4bcc844965eaf0d49490fa2399eb63671a86e", "39c21c5ea468b28486180b3f900823c8706badf8a74dcdb8302040bba3415ff9", "49445d3bf411f9fae6ad3c8d301e95536d7436b45c99f6f83c90294abcb87c4f", "4d66ea7210affa196a1dc26c284f54e4200c6825f1825cbe185514c8959646e3", "58db5970c660bc5f8c9e35ad0e3afaae4c8aa2a881542e7e1781bcab471f218b", "617fcd9360b6d10d4ba7ec5f6ad934ca1bcb4a105620bfccd35b879f6bf610ec", "71237d99e527773471c7a6615f0aec71d591dd4a2d078b721ac11c2ae5e68609", "83f1285795935c3da1fb2d18a2825ef582479a376ffac1155b42e174e3c59d2e", "a0351132a6069ab4d5c666386043fa2f8608d4bcd69db2925cbbaed350152c1b", "c49865b87d29226f0de102d4e2c481b22018e6c5f2dce85e6c313b3641f0d6d2", "c4f5d245d9b212e3e62ecfd62dead04f75eb5515363d2b9b05251947a0c466b8", "cef385ff3f8daa83ffb24f1f20bed716de1f9bf026e25b78486203d68a7582da", "d91bf691c78a2fb476eba1327e5b55660a16a33916a8dabf7cb67ce9296af31e"], "key": "<HKCU>\\Software\\<random, matching '[A-Z0-9]{14,16}'>", "value_name": "data"}]}, "reports_count": 15}, "Win.Virus.Xpiro-9093573-1": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-execute-writable", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-long-cmdline", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "hook-installed", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "file-ini-read", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "pe-uses-dot-net", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "modified-file-in-system-dir", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "file-ini-modified", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0003"]}, {"bi": "artifact-flagged-antianalysis", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-ie-zone-settings-modified", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "registry-service-type-modified", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0003", "T1112", "T1058"]}, {"bi": "pe-packed-vmprotect", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-xpiro-mutex", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "malware-trojan-xpiro-compound", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "artifact-multiple-extensions", "hashes": ["72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-filename-mismatch", "hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "pe-imports-empty", "hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "mitre_attack_tags": []}, {"bi": "excessive-logical-drive-enumeration", "hashes": ["97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a"], "mitre_attack_tags": ["TA0007", "T1120", "T1025"]}, {"bi": "artifact-flagged-sandbox", "hashes": ["97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37"], "mitre_attack_tags": ["TA0005", "T1497"]}], "category": "Virus", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Expiro is a known file infector and information-stealer that hinders analysis with anti-debugging and anti-analysis tricks.", "hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "iocs": {"domain": [], "file": [{"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\msiexec.exe"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\snmptrap.exe"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\sppsvc.exe"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\vds.exe"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\wbem\\WmiApSrv.exe"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\wbengine.exe"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%SystemRoot%\\ehome\\ehsched.exe"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\Microsoft Shared\\OFFICE14\\MSOXMLED.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\Microsoft Shared\\VSTO\\10.0\\VSTOInstaller.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\Microsoft Shared\\ink\\ConvertInkStore.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\Microsoft Shared\\ink\\InputPersonalization.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\Microsoft Shared\\ink\\ShapeCollector.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\Microsoft Shared\\ink\\TabTip.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\Microsoft Shared\\ink\\mip.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%ProgramFiles%\\Internet Explorer\\iexplore.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\1lcuq8ab.default\\extensions\\{ec9032c7-c20a-464f-7b0e-13a3a9e97385}\\chrome.manifest"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\1lcuq8ab.default\\extensions\\{ec9032c7-c20a-464f-7b0e-13a3a9e97385}\\chrome\\content.jar"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\1lcuq8ab.default\\extensions\\{ec9032c7-c20a-464f-7b0e-13a3a9e97385}\\components\\red.js"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%APPDATA%\\Mozilla\\Firefox\\Profiles\\1lcuq8ab.default\\extensions\\{ec9032c7-c20a-464f-7b0e-13a3a9e97385}\\install.rdf"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles(x86)%\\microsoft shared\\source engine\\ose.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%ProgramFiles(x86)%\\microsoft office\\office14\\groove.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%ProgramFiles(x86)%\\mozilla maintenance service\\maintenanceservice.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%CommonProgramFiles%\\microsoft shared\\officesoftwareprotectionplatform\\osppsvc.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%SystemRoot%\\ehome\\ehsched.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%SystemRoot%\\microsoft.net\\framework64\\v2.0.50727\\mscorsvw.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%SystemRoot%\\microsoft.net\\framework64\\v4.0.30319\\mscorsvw.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%SystemRoot%\\microsoft.net\\framework\\v2.0.50727\\mscorsvw.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%SystemRoot%\\microsoft.net\\framework\\v4.0.30319\\mscorsvw.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\alg.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\dllhost.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\fxssvc.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\ieetwcollector.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\msdtc.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\msiexec.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\snmptrap.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\sppsvc.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\ui0detect.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\vds.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\vssvc.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\wbem\\wmiApsrv.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%System32%\\wbengine.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%ProgramFiles%\\7-Zip\\7z.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%ProgramFiles%\\7-Zip\\7zFM.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%ProgramFiles%\\7-Zip\\7zG.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%ProgramFiles%\\7-Zip\\Uninstall.vir"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "path": "%SystemRoot%\\Registration\\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{13306ED4-EC86-4838-A1A4-33FAC65AD4DD}.crmlog"}], "ip": [], "mutex": [{"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx67"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx68"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx69"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx70"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx71"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx72"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx73"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx74"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx75"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx76"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx77"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx78"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx79"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx80"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx81"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx82"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx83"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx84"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx85"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx86"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx87"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx88"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx89"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx90"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx91"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx92"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx93"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx94"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx95"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx96"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx97"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx98"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx99"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "gazavat-svc"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx31"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx32"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx33"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx34"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx35"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx36"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx37"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx38"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx39"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx30"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx28"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "kkq-vx_mtx29"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "gazavat-svc_28"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "Microsoft.Windows.Setup"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "name": "Global\\<random guid>"}, {"hashes": ["2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2"], "name": ""}], "registry": [{"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\CLR_OPTIMIZATION_V2.0.50727_32", "value_name": "Type"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\CLR_OPTIMIZATION_V2.0.50727_32", "value_name": "Start"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\SECURITY CENTER\\SVC\\S-1-5-21-2580483871-590521980-3826313501-500", "value_name": null}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\SECURITY CENTER\\SVC\\S-1-5-21-2580483871-590521980-3826313501-500", "value_name": "EnableNotifications"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\STATE", "value_name": "AccumulatedWaitIdleTime"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\LISTENEDSTATE", "value_name": "RootstoreDirty"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.101", "value_name": "CheckSetting"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.103", "value_name": "CheckSetting"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.100", "value_name": "CheckSetting"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.102", "value_name": "CheckSetting"}, {"hashes": ["0a04b54b5a9b865f24f5e34cbb270e8dd86acf850051fc8c080a0a275726b58e", "2fb0b157b1219877a87e91206f452e94fe201d8e2d5aa6a0137561d0fa476bce", "4328981354e850cded4cf8c84013397d9f8d9a6cfc17fad7dea6e8a284bd8f61", "455d38581ca658f0d0a9d7d1ff9770a90a3d23d78eb4e260dcc8be3c6f16379d", "72a7f1bb94cbbc25435d78c534f2d5dc240d7f6cd1c27427aca40ac497e3229f", "82cd30e65834c6c4d92f08baf67a82d5648d2faa1fbd43afe25e24f4b426d1f6", "860d4689b5494032861f7686069f1baa8456809f18fedf91fc5ab4d2ca8be65a", "86edb5d3da89675b18ce415200f6947858078bda6960da13bc7e332390eafa85", "8b427ba5d5811bfd4abec459b1497a36263f09da4dc28e97d19d80ef726eecc2", "97787e9c62e495bd38190f22477b408542462c6882f80ed79a6a01c829905c37", "a22dd5124ec76819f479b600593ca0e185fa1d202eeeeb38f79ba60909d1d692", "bc839bdbad5bd3b32f010f70afd19512cc954735bf6bd56841561fffbb31702d", "dd56a2325867ab4f2afc4d4a344b98e0cd09fe14ae267ecbc19dec338bd68223"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.104", "value_name": "CheckSetting"}]}, "reports_count": 13}, "exprev": [{"count": 10958, "description": "DealPly is adware, which claims to improve your online shopping experience. It is often bundled into other legitimate installers and is difficult to uninstall. It creates pop-up advertisements and injects advertisements on webpages. Adware has also been known to download and install malware.", "name": "Dealply adware detected"}, {"count": 2298, "description": "An attempt to exploit CVE-2019-0708 has been detected. The vulnerability, dubbed BlueKeep, is a heap memory corruption which can be triggered by sending a specially crafted Remote Desktop Protocol (RDP) request. Since this vulnerability can be triggered without authentication and allows remote code execution, it can be used by worms to spread automatically without human interaction.", "name": "CVE-2019-0708 detected"}, {"count": 1522, "description": "A PowerShell command with a very long command line argument that may indicate an obfuscated script has been detected. PowerShell is an extensible Windows scripting language present on all versions of Windows. Malware authors use PowerShell in an attempt to evade security software or other monitoring that is not tuned to detect PowerShell based threats.", "name": "Excessively long PowerShell command detected"}, {"count": 1226, "description": "Process hollowing is a technique used by some programs to avoid static analysis. In typical usage, a process is started and its obfuscated or encrypted contents are unpacked into memory. The parent then manually sets up the first stages of launching a child process, but before launching it, the memory is cleared and filled in with the memory from the parent instead.", "name": "Process hollowing detected"}, {"count": 734, "description": "An attempt to bypass application whitelisting via the \"Squiblydoo\" technique has been detected. This typically involves using regsvr32.exe to execute script content hosted on an attacker controlled server.", "name": "Squiblydoo application whitelist bypass attempt detected."}, {"count": 500, "description": "Crystalbit-Apple DLL double hijack was detected. During this attack, the adversary abuses two legitimate vendor applications, such as CrystalBit and Apple, as part of a dll double hijack attack chain that starts with a fraudulent software bundle and eventually leads to a persistent miner and in some cases spyware deployment.", "name": "Crystalbit-Apple DLL double hijack detected"}, {"count": 284, "description": "Install core is an installer which bundles legitimate applications with offers for additional third-party applications that may be unwanted. The unwanted applications are often adware that display advertising in the form of popups or by injecting into browsers and adding or altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Installcore adware detected"}, {"count": 124, "description": "A process was injected into, most likely by an existing Kovter infection. Kovter is a click fraud Trojan that can also act as an information stealer. Kovter is also file-less malware meaning the malicious DLL is stored inside Windows registry and injected directly into memory using PowerShell. It can detect and report the usage of monitoring software such as wireshark and sandboxes to its C2. It spreads through malicious advertising and spam campaigns.", "name": "Kovter injection detected"}, {"count": 73, "description": "Gamarue is a family of malware that can download files and steal information from an infected system. Worm variants of the Gamarue family may spread by infecting USB drives or portable hard disks that have been plugged into a compromised system.", "name": "Gamarue malware detected"}, {"count": 29, "description": "IcedID is a banking Trojan. It uses both web browser injection and browser redirection to steal banking and/or other financial credentials and data. The features and sophistication of IcedID demonstrate the malware author's knowledge and technical skill for this kind of fraud, and suggest the authors have previous experience creating banking Trojans. IcedID has been observed being installed by Emotet or Ursnif. Systems infected with IcedID should also be scanned for additional malware infections.", "name": "IcedID malware detected"}, {"count": 28, "description": "Maze ransomware has been detected injecting into rundll32.exe or regsvr32.exe. Maze can encrypt files on the victim and demand a ransom. It can also exfiltrate data back to the attacker prior to encryption.", "name": "Maze ransomware detected"}, {"count": 24, "description": "Bluestacks adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Bluestacks adware detected"}, {"count": 14, "description": "Trickbot is a banking Trojan which appeared in late 2016. Due to the similarities between Trickbot and Dyre, it is suspected some of the individuals responsible for Dyre are now responsible for Trickbot. Trickbot has been rapidly evolving over the months since it has appeared. However, Trickbot is still missing some of the capabilities Dyre possessed. Its current modules include DLL injection, system information gathering, and email searching.", "name": "Trickbot malware detected"}, {"count": 10, "description": "The certutil.exe utility has been detected downloading and executing a file. Upon execution, the downloaded file behaved suspiciously. The normal usage of certutil.exe involves retrieving certificate information. Attackers can use this utility to download additional malicious payloads.", "name": "Certutil.exe is downloading a file"}, {"count": 9, "description": "Special Search Offer adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Special Search Offer adware"}, {"count": 5, "description": "An exploit payload intended to connect back to an attacker controlled host using http has been detected.", "name": "Reverse http payload detected"}], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2020-07-31T15:50:56+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Ransomware.Cerber-9142650-0", "Win.Dropper.Gh0stRAT-9111297-0", "Win.Dropper.Tofsee-9108085-0", "Win.Malware.AgentTesla-9093590-1", "Win.Virus.Xpiro-9093573-1", "Win.Dropper.DarkComet-9152539-1", "Win.Ransomware.TeslaCrypt-9105565-0", "Win.Downloader.Kuluoz-9106992-0"]}