{"Doc.Malware.Emotet-9733384-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "document-contains-vbforms", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "macro-contains-random-vars", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "vba-document-open", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064"]}, {"bi": "document-single-page", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "document-contains-vba-macro", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0002", "TA0001", "T1173", "T1193"]}, {"bi": "artifact-flagged-obfuscation", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "document-embedded-low-content", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "wmi-process-create", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "TA0002", "T1218", "T1047"]}, {"bi": "powershell-encoded-buffer", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "TA0002", "T1086", "T1202"]}, {"bi": "registry-powershell-ras-dll-loaded", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "document-exe-dropped", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0002", "T1173"]}, {"bi": "process-long-cmdline", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "document-launch-powershell", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "document-network-traffic", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011"]}, {"bi": "powershell-encoded-obfuscated-cmdline", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "powershell-remote-code-execution", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "document-wmi-process-create", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1218"]}, {"bi": "vba-compound-random-network-communications", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "document-min-and-embedded-network-traffic", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "word-document-heuristics-compound", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064", "T1193"]}, {"bi": "network-dns-doc-network-traffic", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "feed-domain-document-network-traffic", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "windows-utility-downloaded-artifact", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "url-forced-download-prompt", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1105"]}, {"bi": "network-downloaded-executable", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-snort-file-exe", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-dns-download-executable", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-dns-malicious-snort", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011"]}, {"bi": "network-file-downloaded-to-disk", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-downloaded-executed-from", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "registry-service-with-autostart-created", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0003", "T1112", "T1058"]}, {"bi": "currentcontrolset-service-added", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035", "T1060"]}, {"bi": "document-direct-ip-traffic", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "nginx-webserver-detected", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-http-numeric-ip", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "TA0005", "T1071"]}, {"bi": "network-communications-http-post", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "vba-compound-random-generic", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-downloaded-executable-service", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "deleted-executable-in-system-dir", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "pe-invalid-checksum", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-shellcode", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "network-http-non-standard-port", "hashes": ["b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac"], "mitre_attack_tags": ["TA0011", "TA0005", "T1065"]}, {"bi": "pe-filename-mismatch", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac"], "mitre_attack_tags": []}, {"bi": "network-snort-policy", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "malware-document-av", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": []}, {"bi": "pe-uses-armadillo", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-downloaded-obfuscated-executable", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0"], "mitre_attack_tags": ["TA0005", "T1027", "T1105"]}, {"bi": "network-snort-server", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77"], "mitre_attack_tags": []}, {"bi": "network-snort-file-generic", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1"], "mitre_attack_tags": []}, {"bi": "document-fault-report-file-created", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1"], "mitre_attack_tags": []}, {"bi": "document-crash-dump-file-created", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1"], "mitre_attack_tags": []}, {"bi": "document-crash-detected", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39"], "mitre_attack_tags": []}, {"bi": "potential-registry-script-execution", "hashes": ["0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f"], "mitre_attack_tags": []}, {"bi": "settings-power", "hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96"], "mitre_attack_tags": ["TA0005"]}, {"bi": "document-launch-java", "hashes": ["9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "service-dll-registration", "hashes": ["04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024"], "mitre_attack_tags": ["TA0003", "T1050"]}, {"bi": "enumeration-volumes", "hashes": ["9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962"], "mitre_attack_tags": ["TA0007", "T1082"]}, {"bi": "windows-util-wevtutil", "hashes": ["a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac"], "mitre_attack_tags": ["TA0005", "TA0007", "T1070"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Emotet is one of the most widely distributed and active malware families today. It is a highly modular threat that can deliver a wide variety of payloads. Emotet is commonly delivered via Microsoft Office documents with macros, sent as attachments on malicious emails.", "hashes": ["006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "e9397a6cc7ecd0f46143b27188bfdd1917a78ab0fedd946061cba3eafe8c6e04", "ec1c54d4a4068b59aaad5b2beae112d36490f49179257c5ce72b42323fb4c8ba", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77"], "iocs": {"domain": [{"hashes": ["006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96"], "host": "rueckert-online[.]de"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96"], "host": "e13678[.]dspb[.]akamaiedge[.]net"}], "file": [{"hashes": ["006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77"], "path": "%HOMEPATH%\\PS29B6C"}, {"hashes": ["006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77"], "path": "%HOMEPATH%\\PS29B6C\\LSq3B_L"}, {"hashes": ["006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "274602404a722f0dc7b82c61d520573d1f9a010d174f4685b59899a4158cde5b", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "33d7e076a165459ddf80481d0ef7e8462d6707c2fc54634fd2b3be32ac3a4367", "36e42d37c3809cdbef5cb56fc6b16489998cbdf9eecf6269fd7b12d1ae942b28", "380cb6133bacfea1bbb24b61c8b5f063ab8fcb1fc5c124b551fc39c64492a7d0", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "4ff0755d87a8bb26423a9335fea2400f3a009a066bc76ed803242f9e7d4464b0", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "9743fd3695fbfc7a4e8a48a1b5fdb4c7982e723d5deaab53258299fbccbb4962", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b", "b04bdced0af64f0eb6386dc3942c8465479c154cb6edc3b7c675f2b4f17248a1", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "c6ede46ce214762e82e0bab2b73ff5e69df3236410688e8b7de96909b6935275", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "d04d78dde35de6e043eae1de5c5818129cbbffa8d7b3cd7e262bcdc4604d0bc3", "d11c413db27501bb98a6b3042f284a0cf5285972959c4548058fc28219d6887b", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "efa4e901ecdc092d7d1ed264a7ea36b70412c32e6665198b0c3a6da8827f592e", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77"], "path": "%HOMEPATH%\\PS29B6C\\LSq3B_L\\Zvh5eanv.exe"}, {"hashes": ["b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99"], "path": "%SystemRoot%\\SysWOW64\\vbscript"}, {"hashes": ["4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f"], "path": "%SystemRoot%\\SysWOW64\\mfcm100u"}, {"hashes": ["767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b"], "path": "%SystemRoot%\\SysWOW64\\txflog"}, {"hashes": ["d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9"], "path": "%SystemRoot%\\SysWOW64\\dbgeng"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4"], "path": "%SystemRoot%\\SysWOW64\\SystemPropertiesHardware"}, {"hashes": ["220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a"], "path": "%SystemRoot%\\SysWOW64\\odbccp32"}, {"hashes": ["31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07"], "path": "%SystemRoot%\\SysWOW64\\dpnaddr"}, {"hashes": ["3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd"], "path": "%SystemRoot%\\SysWOW64\\msscp"}, {"hashes": ["88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad"], "path": "%SystemRoot%\\SysWOW64\\sberes"}, {"hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96"], "path": "%SystemRoot%\\SysWOW64\\cscript"}, {"hashes": ["209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad"], "path": "%SystemRoot%\\SysWOW64\\eappcfg"}, {"hashes": ["6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d"], "path": "%SystemRoot%\\SysWOW64\\msidcrl30"}, {"hashes": ["0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae"], "path": "%SystemRoot%\\SysWOW64\\wups"}, {"hashes": ["f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce"], "path": "%SystemRoot%\\SysWOW64\\XpsPrint"}, {"hashes": ["e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "path": "%SystemRoot%\\SysWOW64\\batmeter"}, {"hashes": ["cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3"], "path": "%SystemRoot%\\SysWOW64\\d3d8"}, {"hashes": ["cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7"], "path": "%SystemRoot%\\SysWOW64\\tsbyuv"}, {"hashes": ["acdf105a729cf7406edfa73c63705a6f704d1dfbe9eecbe104a82b5a5685203b"], "path": "%SystemRoot%\\SysWOW64\\KBDFI1"}, {"hashes": ["b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51"], "path": "%SystemRoot%\\SysWOW64\\samlib"}, {"hashes": ["76a1d513dd52936c6e255d3b8c1587dbb63c7930b2c593b50da9c7bab273f104"], "path": "%SystemRoot%\\SysWOW64\\INETRES"}], "ip": [{"hashes": ["006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "04f4ee593fb08de097d53ffdc2b4d24e7056414266b1c9dc74980fa93d44b024", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "129b85aaa1cb31320bf74ea541452331d8e7a6b5bec9a9e7a5f36d761f60b328", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "200af4cf86eaf071d6dca59f9678feccf9f024da48ea982fe9ed3a230ae32fc0", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "2deb040c0e21ebd5a15106bb80a10b62698087ada555159445824294f9d02e12", "31c45c16cabd7f1135635058b05660eeeaf8d75141f07b3175ceba6418becb07", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "5a3d83263f3eddfd7de2a794788b112ad8bd1f9023cfcc157273eb8f14db4fab", "5e4bf2881237f9b498b980804fca7bd8174a2c1524b22f9d2c4518bdcc5fd434", "61d456f6ccb42a29ea2ac29c697e0c582fe05b44cc74d1e91cbed8660875ed38", "63e100d83a59a840eea4625356edbbeac0228e22629dfaba3df294915d3282ce", "6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d", "72a75f69fcda870ad3487ecbbabd37c0155ef3dfacbc5fa3a5daaa4cf39d4799", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "802ae4db4c85b1e87ff3f32771b78705b89c20edec85b2eaacc5ffef9898850e", "81691d00071c1461c112049c6aed578387a21a797e7d5a3b8379c00d9035ebbd", "8298791ba02aaf624bf226fb7e5c32923ffa50e4893fadc1246c2978992645e9", "889820a7c47c9a98e413ed28e0854ea5b1afbeed008292c07a2e029fa792dc4f", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "9f595dd3e33c0c1cce90082d82aa7cf56b88b1e8af787babae9af2677abf2f9d", "a41b0446646f3b96243c4a81b4eb954031418ff0f8562cb580d5404493ce3dac", "b2071df64e4db2294c052064e3ea12cc0c1fc20b73b7b93853e5b977506bcd39", "b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c4a97de32542a6f99850875218770a6f1c2b087ff744a3c364fec134bfa2fde5", "c4b845f33ff5eb8acfc5b49f2b7501bf7017b9252ff2a024967a14da51ad2726", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96", "c72f39f703db56f35079c91f739a3a644b627261f5724d26020df6fe9b355c82", "c782e48e380ee02a5d56e5993731919896319344149013ab5352b8d152c7b8d8", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "c81b7a9b567c8962bc457806cbd922dbdd030c1d411e8e1d1e85fe42a0ba72cd", "cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3", "cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9", "db39562e878454090f37f55bbace9a05ea1d5cd610d87a153dcdeff6b4e82e60", "e072444d42f521938135698eeae92eb7c08c03b7301de2602c66076b1ecb9fac", "e23c63a28a16506aad4330575af420c1308e323c179d1da3f5cb574690618d84", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480", "e8f78b79bcf50a4c45a53d72c1ac7cf403e5f1e37f933989e3a1ce1a3bee734f", "f0abfc57f7a0bceaf6427344dac50ffcc9db39892bb2e618bea40bff5637d115", "f38c40d5bba498697257f7f273a6f240642f780f133972d877fc0e09910511ce", "f92351a1d92cdf73c18ea10eca4ec59124e00d8b9db9b13462d42d30e3c0bc5d", "fd4a62ca1b59fab1f077910a51ebbe9819e7dad5c415beef5098eb293288db77"], "ip": "149[.]202[.]5[.]139"}, {"hashes": ["006011ce9a1da57c2f754acf3ab3e336f82ef0454bf4ab4eb326c7201de49ca7", "00dadb7eb648bbfff26bb4f0fbf97e0d27ff857ede9ac43d90173fd98f0e6860", "0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04", "04f2dffeb9c1570452b3cc610f00a37f18a90a2cca47c97c94d2cd667da3d4ce", "0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "08edde777c87b40cd3c4f677b7d1f8a7ea9245219850bfe879e277909898211f", "0d67c7dbea39eb2edb6e4a363ac8738c949c1a606e6ae77c56cce4c8b31560b3", "0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae", "12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "149a3d53f6065bd1885682a82148193582f678bc6bbeef4c27c0fc96a6112dd7", "15deba69044594e12348428dccd3451e2b8c78df74daac11f16a6cd29a75874d", "17922392a72894af5fc275928a401d843f296d08934821be606ef25268767162", "17c72fae234cbcd5593919d234d5e5be0f10f357cb64076810efb0f0e41f9578", "1aa92916074cf5c819de2ea8b9ca9b5f04e1afd1f6ccfeae0a8849c3e8153e46", "209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad", "219d1f3a929f192d379292bea355e8f4dac85ab3802f603eb9509560fc845b5f", "220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a", "2455308d12306b5b5ecb3c4de58a0cc1f09f1cfda7b69c936fe447b619e9cddb", "24e66606dd42fb259e7ed01e81b054c21190a9ea60adc8b7be387e05b04b303b", "2a6a8755b93ac09b7aff0d03f2743c1bd9e01823dc6cd4811ba0ee492b2414c0", "2de44ef1df4fcc293491c9c21c8c5a42a0f335f6383ae96e0ef06ea76ba13c6c", "c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96"], "ip": "81[.]169[.]145[.]74"}, {"hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96"], "ip": "118[.]110[.]236[.]121"}], "mutex": [], "registry": [{"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": null}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Type"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Start"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ErrorControl"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ImagePath"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "DisplayName"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "WOW64"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "c7a199cbe0607b9133ea053d76050203612686dcc8f573e3bf483c9b90257a99", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ObjectName"}, {"hashes": ["0877c1b6beb53bb870d703f82e1cb3ee43ebc4417fe7e9031a2c7924d3d5b0b4", "3d307b96ccf7d09fae52deccbfbbb64c300e609d03dcd32b6a96301027dfe7cd", "4bb317a0281a18a3128721fe9b5a599e190b665207420950628e86a5efa8bc7f", "767e3a1c63833037477336bc23721a2a3a7f9e92fb657673db9e71796d48c11b", "88f4741abccc92b01d774ef37200527aef3dfe7a1b92c67d88efeb105d07faad", "b8591a9496680fcb96b1142c3f1faf60d928ad049def0df162c7fbfb839bd605", "e8bc071163937181a3b7d387e48af7d8abdfcfd2b83692bf8132666b773a5480"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Description"}, {"hashes": ["12131dd503457635828b54b6d1ad47041f1f1372a6edbad27cee5eadf5e7c234", "d8a18c1e942b8bfac44f6fb23fe3a5b20a85908198c113263b544179e5ef42f9"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KBDDIV1", "value_name": "Description"}, {"hashes": ["0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINSOCKHC", "value_name": "ImagePath"}, {"hashes": ["0179543a5e5942fb43fa147e02ae2c1bc42664fb1dc2b090fb43fbd497a21e04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINSOCKHC", "value_name": "Description"}, {"hashes": ["209e9056d13fee66177c3a5afaf80a077875e5b59f0247cc0a6a024e6ae92bad"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\CHARMAP", "value_name": "Description"}, {"hashes": ["0e69aa45acf780b51590e1e2eebf345dc9356469c52ad2fbd3540f0faec42bae"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\HNETMON", "value_name": "Description"}, {"hashes": ["220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\NDISCAPCFG", "value_name": "ImagePath"}, {"hashes": ["220732c38506e7c51e3f0c1f27a142052b52c1a5306c0991acf7de311b7c8e2a"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\NDISCAPCFG", "value_name": "Description"}, {"hashes": ["6c48bde7124d62beb69b920eec481a3cf0d20bccd879160b91e9ea169efe304d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINSRPC", "value_name": "Description"}, {"hashes": ["cb923283a1e056740b964d0a14464a70913f42bb34f24442b7aebf6e3e145da3"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KBDCR", "value_name": "ImagePath"}, {"hashes": ["b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WABSYNCPROVIDER", "value_name": "ImagePath"}, {"hashes": ["b8148bbbb61d75c39bbc0d26f11e34dd345ecf3b2b08efde647b470a5c191f51"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WABSYNCPROVIDER", "value_name": "Description"}, {"hashes": ["c5c718105e4bb5d0c0273bac6c09227e978d2657d74c5c7157e010c29b1f2a96"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SETIEINSTALLEDDATE", "value_name": "Description"}, {"hashes": ["cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WLANAPI", "value_name": "ImagePath"}, {"hashes": ["cc1aa976b4ab2e8c0a27ae0462a1f04190a4f1267029cf4b51b013d4c90085f7"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WLANAPI", "value_name": "Description"}]}, "reports_count": 77}, "Win.Downloader.Upatre-9645450-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": []}, {"bi": "malware-compound-cta-activity", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": []}, {"bi": "pe-section-blank-name", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-uses-telock", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": ["TA0005"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": []}, {"bi": "malware-upatre-detected", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442"], "mitre_attack_tags": []}], "category": "Downloader", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Upatre is a malicious downloader often used by exploit kits and phishing campaigns. Upatre downloads and executes malicious executables, such as banking malware.", "hashes": ["0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "7655437f88d0d6f97607a9ccac55e3a2c79d21c7ac9a23406e6998d41c47a059", "78de0fb41a1a98e930cefd221bf2b3caa4510167769b84a8b7bd646ca3e9e6ff", "7b30b9a061657b77ae5bc2020d21108d3ee5ba8e4dd664898e463b50f2a97742", "8705ab6866854b5597bcb110bfeb34d141a52ffa0760eb3d3d2893b34419af63", "8b293a405477939d5b7fe3f7e9101eb50623e4c540520f644ab37c3bc345d0aa", "8d73a2d9dc675a1cdf9096957af8219729d542846822c787ac116e311895f673", "95c28a00de8b102bec8ca92b625f221240f42570b3873f824d3e89180b248ce6", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "9ab41ab6098b84c781593acb55346c145d8e598f98bcdd30bd1153c12cc2b4c9", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "a3f99051b6ff205e13e024feed290eeef56e1890747cdb9d777493a77c11dd62", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "a5457347e15035d270ce82fcca72976bec2a6dc63203180940cf7d0ee1dd644e", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "ac42f8d708b5189195c2834afcfaa63bfe4c5640283892d02ae74b49eba9250d", "ae2055008915a27ab1daad38e069ed89b2e2b4470257582a6b10a09b7ad42310", "b3d01341328a89a4e6244adc5ad9bb703cf7c5fd5bceb495c0973b2f01c82f92", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "be6a06abc5a44f463bf161061727d53df8e11156842335280157f047a7d511f1", "c4069fb6662262f08f5170d42a9d355f48b2f687cb4bfad5f1d5c41db5287929", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "d3f7cb08c1c3c7a293075120d9496df62606ebfc10f8cc7aacc20c97f725e6e7", "d5a27deed274228a8100050e73273e33c514ddd2d4df2d91b49d57141739da0d", "d7d32cea9223f348fd9d6d43a5cf61c6744738604f9fe1375596bc50db6a1717", "e80e52a92db7d967ffa79fe8bbfd53d0195e2c49e8b411f59e98a40039424fe3", "f0e633d46c21d5876e4e382f69e5dac9c7befc321d3edfa16c2790442395b8b1", "f14188b537ca7efc7f72e138f81e61e84ed01dd9a0cc1e8cb56e6724bd2d814d", "f40093e8a71005ccf199c3cf7d304f56bcdacbcda1abd00d4626675af231b011", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682", "f7146d0ae6aa1dd341be889d11487559ea66c12edf6ca74cc7c2b93581e8ad4e"], "iocs": {"domain": [], "file": [{"hashes": ["0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682"], "path": "%TEMP%\\koekuky.exe"}], "ip": [{"hashes": ["6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4"], "ip": "66[.]199[.]229[.]251"}, {"hashes": ["5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3"], "ip": "5[.]149[.]250[.]99"}, {"hashes": ["24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d"], "ip": "204[.]79[.]197[.]200"}], "mutex": [{"hashes": ["0b351d8c914dee0f6fb1a8cf0ee10d17be236a86d62b93cfa7e4cc9d85b7b2c6", "0bcc5be9e99c87463dff135ad9640b63b6ef12b00dbfd249ab1f52b7ababb038", "1b91505d7f8cdcfcd8d1a5fe9f8a137e30e32c5563e2d4e28b478a2a8544547d", "20aa82756a50d2d679610d0b3de036af63130004aef468d5fb3c8ef8d6770fe9", "24e566898e53fa0e1d8db97dc522536316e3d87ee7b20d181f9c609b64dbc42d", "2c2d9e15397d88930e6f19711a26184b04ac220ae0c952d16bb31afdc3f7aca5", "2cb0bd47f91f825c1ca8b683254c402c880b0585f6398c912014d1bc45511fc1", "2d2b90f6ace963bff3c1d6b736c5527fc4f93b3284520a7af5bd730390913442", "2e851c5fea4aeb1b55306f1927060b62824e1b0ab3fb718d865be211bb772b98", "3007a189e7d2394543c28ddb48192360392de5cc63829440f7dfdcb60d0a4ec1", "3118cd3730c90357f549a2dda628dd9a7ccf23aa54f114bb9a23dc6085bac67c", "379886ffa241b44de789fef925e19fdf5c431262042bbe3e03bf7ae6f9a6075b", "386aab31e8c041703f0685f7da22991fd95d0fdbf91f829bb4a77b34614b9b57", "3a2242cc28737dbb7f4788534bb8955d1ecc69983ed383c6903d58829aabf173", "442a477646f14b48686f312291d5563c8f1cd0819c4455ec335ce66787d52b59", "486484fe9b4e09dc5e28515e8b82dafde6378b1183dff533fb993f40a1e1fe17", "487b3185bce48ab372eb092a3d5b05aa46bdd29c70903aa2d62a266d325007c0", "48f1d0d08d2a232a87d2d1920602286c6fc5dc2ee429dcf3b180d902613ed91e", "4e89e98ccd8e42917cb584b7ddbaa8296838d4417bcb939d90c0510d632ee3b3", "4fa982148d1ddd6f6bc6f945685961ed185894d376a063477d75b23fcb8c9c9c", "53101f0852ad604e9c04d15e7c819e52143f664518c31a9dc18bb3c7dc6cb252", "5ad26ec4ee285652118d79467ee394118b52105f7796f25b04fc44d3ac52002c", "5b2fb62a9df91d1185074232003e89659d26069dae031a89ef83fbe7af083b67", "6481edee40411b46abd8fed82445056d64fb67c6706c1b2c970e34b7206833b3", "67eaa906b60fd7ea7e6ce1dfa9748a34e6ad8491b0dd003db57b378341329758", "6d8bd09f6670ecec89993107c071fd3718eb7c847237e12d5e676557bb07922b", "97e113f83339f9c1bfffaed193b5feff763882b78ee125f5bdc311e954023c73", "a035898305be18cb2bca9f892d5366e0ca4064c6e9dbd7a1bf59cde1cc1b8cd4", "a5027c3098a7066881217cd11e903630029c7594c63fc27201c04852a6afc636", "ab8b467ffb9e21544ee8851ffa16026d989690a30141821f870be04ca461625b", "bbb19bd29114f70777f0746a8a5bcd6a350e9e9333b990f038ec6c83cc825606", "c484c2671ae5c2f1db5e64462037b813b6953044b31563ec1ac8c449c42b4dcc", "c8935892f14d0ddaffd0c8cdee2f7aec7aeb18cf6ee1ab5cced4d3c1e80f8ca6", "c99d0e6326b432e92d859e529972263f0f961bd839f3cc5376bcab549d406c5f", "f435991d3b5803e0e34a26430229eac149f0c8d1a672bcc3937cb10163eb5682"], "name": "Yd9dH99P"}], "registry": []}, "reports_count": 35}, "Win.Malware.Razy-9645560-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-packed-upx", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-tls-callback", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-disablesuac", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387"], "mitre_attack_tags": ["TA0005", "TA0002", "TA0004", "T1088", "T1089"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387"], "mitre_attack_tags": ["TA0003", "T1112"]}, {"bi": "pe-uses-dot-net", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "pe-filename-mismatch", "hashes": ["714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": []}, {"bi": "pe-header-linker-major", "hashes": ["714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-future", "hashes": ["714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-obfuscation", "hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-imports-empty", "hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-sandbox", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "nginx-webserver-detected", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-snort-protocol", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "public-ip-address-identification-attempt", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "registry-autorun-key-modified", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": []}, {"bi": "registry-autorun-suspicious-public-ip", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": []}, {"bi": "potential-registry-persistence", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-temp-dir", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "pe-packed-vmprotect", "hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-invalid-checksum", "hashes": ["88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "pe-section-shared", "hashes": ["2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-memory-vm-detect", "hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e"], "mitre_attack_tags": ["TA0005", "T1497"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Razy is oftentimes a generic detection name for a Windows trojan. It collects sensitive information from the infected host and encrypt the data, and send it to a command and control (C2) server. Information collected might include screenshots. The samples modify auto-execute functionality by setting and creating a value in the registry for persistence.", "hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "9d9ddf3de368148f50329cb1a917a85c66fc86a9c2dfa8cd7c70e877072bd633", "a74118dc5b3646fce6e4e7c140f660a0f2830c2ea168c97e2acb03dc774c00fc", "a85b0973146acb45331d08a0a2cc064f143d08c05d83587613d5cdf24995226a", "a96c939ef168918535cc6951e8e8d28713fef80921e53772e54ef8493fc85fa7", "abab52b23394551d7861e813734f9a2c793378f9a127747f1e967c9d26b856f8", "abb3fbebb5d20bacdeb140fc90ab9b37a1f1b636e885f80ee10d1dd213b94648", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "b183574cfad70042be938a2c01319ee0044af5e0beba20dbea7bb4049c283215", "bbb6c23d0696563cdc0aa8b69fbda7bbbe18071ed7a7f9f9f79c217b7a5e5b09", "c18fc43446a0ee707ed493ce49c358bd86821b6dbfc2766cec286321d06bfe8b", "c6f06bd6b13374ed990591143853478489e44cf48ac8035d5e03af77e376000c", "c924c0bf5ca4caefdfbca5355233685d86f280573641f925c4d89e43977f4da3", "c9a241ff4a5c7d3824ac6c56c7a877da9fae07a478beaf50b7188aa7fe4e3101", "d421d62ee13586c27b32da4b4fbbc6ca41cbb28bdaba919e558d8781a4dfabb5", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "dec41ee8bfd670ae20466beeaeeac2f8f2a0759ac108c773b4603f0287d360fd", "df04e5366d4972ab12f8969aa96bc085096f9439f602000f64a08bdddf4d0fcc", "ecaafd79f889cd0df8a61948fac286a55423cbf34ddec5477581abd23147e0b5", "ef631d026abbed9ea5d6eea69ebe0e48bb602e2930543c71892ff460e72017f8", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78", "fcda4dc3638375f603445d96bc7fdc9c65c6e62b6c3626784d048315deae771b"], "iocs": {"domain": [{"hashes": ["19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "host": "github[.]map[.]fastly[.]net"}, {"hashes": ["19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "host": "raw[.]githubusercontent[.]com"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "host": "icanhazip[.]com"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "host": "nusumu[.]wtf"}], "file": [{"hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78"], "path": "%LOCALAPPDATA%\\Pic1fPBkmq"}, {"hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78"], "path": "%LOCALAPPDATA%\\Pic1fPBkmq\\LOHejsSdpL.exe"}, {"hashes": ["2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e"], "path": "%TEMP%\\ZoPfktG5xw.exe"}, {"hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a"], "path": "%TEMP%\\BbliSPgIP2.exe"}, {"hashes": ["225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2"], "path": "%TEMP%\\KLFx4t62Y4.exe"}, {"hashes": ["48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf"], "path": "%TEMP%\\VkLSKQ6v8h.exe"}, {"hashes": ["4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2"], "path": "%TEMP%\\tqVGagdD5V.exe"}, {"hashes": ["88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409"], "path": "%TEMP%\\GXu1FVrxi6.exe"}, {"hashes": ["85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "path": "%TEMP%\\irNAIN6AiH.exe"}, {"hashes": ["10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278"], "path": "%TEMP%\\qkdr4XmHnT.exe"}, {"hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4"], "path": "%TEMP%\\rSaHiS4iK3.exe"}, {"hashes": ["838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "path": "%TEMP%\\jgOR5DUgyk.exe"}, {"hashes": ["88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409"], "path": "%TEMP%\\uNUdA0UIIw.exe"}, {"hashes": ["47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4"], "path": "%TEMP%\\eFlPiZ0ELd.exe"}, {"hashes": ["ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e"], "path": "%TEMP%\\Q6YEYUhuvd.exe"}, {"hashes": ["d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839"], "path": "%TEMP%\\r8ONbZ3rHI.exe"}, {"hashes": ["fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78"], "path": "%TEMP%\\7dbRepYnC2.exe"}, {"hashes": ["10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5"], "path": "%TEMP%\\QVApcQPsSo.exe"}, {"hashes": ["19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278"], "path": "%TEMP%\\ZH2KPWAEOs.exe"}, {"hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e"], "path": "%TEMP%\\GowMr0xWU7.exe"}, {"hashes": ["2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64"], "path": "%TEMP%\\duGKQfPT2B.exe"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "path": "%TEMP%\\OYZjU6u8Rc.exe"}, {"hashes": ["4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "path": "%TEMP%\\kQtlwarr8G.exe"}, {"hashes": ["3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4"], "path": "%TEMP%\\B0dcCmaQ1Z.exe"}, {"hashes": ["714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456"], "path": "%TEMP%\\b40Z3SufcC.exe"}, {"hashes": ["6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387"], "path": "%TEMP%\\vpzGZxrTjT.exe"}, {"hashes": ["838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081"], "path": "%TEMP%\\EYQ1EEd5g8.exe"}, {"hashes": ["83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77"], "path": "%TEMP%\\6SRffq687u.exe"}, {"hashes": ["66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb"], "path": "%TEMP%\\2vytpLx1fy.exe"}, {"hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f"], "path": "%TEMP%\\dlyC2G7saW.exe"}, {"hashes": ["225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a"], "path": "%TEMP%\\GgrynZJrqf.exe"}, {"hashes": ["2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64"], "path": "%TEMP%\\TB0UStXkOA.exe"}, {"hashes": ["3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4"], "path": "%TEMP%\\Crh2Mh3VUh.exe"}, {"hashes": ["48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3"], "path": "%TEMP%\\WzEUUK0AQJ.exe"}, {"hashes": ["4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb"], "path": "%TEMP%\\QGBvfl7d70.exe"}, {"hashes": ["4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "path": "%TEMP%\\NZnzgE3nTu.exe"}, {"hashes": ["4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf"], "path": "%TEMP%\\77Kgo80d0W.exe"}, {"hashes": ["66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb"], "path": "%TEMP%\\0wVKLkihiP.exe"}, {"hashes": ["62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2"], "path": "%TEMP%\\CZejZcXvir.exe"}, {"hashes": ["714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456"], "path": "%TEMP%\\wdqXonfyov.exe"}, {"hashes": ["6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387"], "path": "%TEMP%\\W8NbWGUaeT.exe"}, {"hashes": ["83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77"], "path": "%TEMP%\\FNSj1t0LkA.exe"}, {"hashes": ["88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "path": "%TEMP%\\XHKqbBCKB3.exe"}], "ip": [{"hashes": ["225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "ip": "199[.]232[.]36[.]133"}, {"hashes": ["85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "ip": "151[.]101[.]248[.]133"}, {"hashes": ["62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac"], "ip": "151[.]101[.]0[.]133"}, {"hashes": ["10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5"], "ip": "151[.]101[.]64[.]133"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "ip": "136[.]144[.]56[.]255"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "ip": "104[.]27[.]142[.]46"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "ip": "104[.]27[.]143[.]46"}], "mutex": [{"hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e"], "name": ""}, {"hashes": ["47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4"], "name": "spvpyIpsg2"}, {"hashes": ["ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e"], "name": "4GdICnbdq5"}, {"hashes": ["d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839"], "name": "LDxHsmBU1N"}, {"hashes": ["fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78"], "name": "GsTKnCbxU7"}, {"hashes": ["10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5"], "name": "BB2m73C8zs"}, {"hashes": ["19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278"], "name": "WSTPeFcwil"}, {"hashes": ["2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a"], "name": "511tqY3pSn"}, {"hashes": ["225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a"], "name": "Qz8D4ETOhK"}, {"hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f"], "name": "h2OHDMYhwt"}, {"hashes": ["3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2"], "name": "fQpMPyheMT"}, {"hashes": ["2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e"], "name": "Pny6FPRzVh"}, {"hashes": ["4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf"], "name": "fIZDnNsvtm"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "name": "Nusumu"}, {"hashes": ["2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64"], "name": "3XNdT7rAOS"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "name": "p8WEjLEdHb"}, {"hashes": ["4fd8ddd68b9f94eaf4b31f6c6cc77b47f3e48d5c0f14d84f2f7b1943ae221ff8"], "name": "nKDnkxFhrc"}, {"hashes": ["62554a0e84f24f6bcaf8e26aa0933338b16397f5af802859f0e847df18fd07a2"], "name": "Xi8dPxwoQm"}, {"hashes": ["48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3"], "name": "lyDaCQ1qak"}, {"hashes": ["4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb"], "name": "baJKfoFYh4"}, {"hashes": ["3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4"], "name": "DQQNHbJyEg"}, {"hashes": ["62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac"], "name": "i1W6c3RvFF"}, {"hashes": ["3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4"], "name": "h1U0Ne3Pp3"}, {"hashes": ["714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456"], "name": "x0AKpiZhiN"}, {"hashes": ["6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387"], "name": "GCDQ72RHyr"}, {"hashes": ["838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081"], "name": "KMtxaroWKp"}, {"hashes": ["83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77"], "name": "8KlC3AlTUp"}, {"hashes": ["66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb"], "name": "o7tNfwd7xp"}, {"hashes": ["88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "name": "2DGFU6B0nb"}, {"hashes": ["88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9"], "name": "ucOhSHkeQb"}, {"hashes": ["975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409"], "name": "EIJmLVGyIs"}, {"hashes": ["85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7"], "name": "6jwpJ6zrQW"}], "registry": [{"hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "ConsentPromptBehaviorAdmin"}, {"hashes": ["03e97e16c8724c33270953be58da27091a18725edfed7ebb596fa051b029329f", "10544c9619839680f12a58ebf5f9b96468cd311bf05a27ada2362986ccd493e5", "19c3adbed33a782424cb8c34372041780777699e460058601c8eb48001e1e278", "2156087ece080c4ddf4b7b7fda1459ad52a270c06087f758b491da19294dff9a", "225a8e97056d1f80ce1ff761b5826fdaa5f1e302ee6a1187cf0cd46298d7c37a", "2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd", "2af8f1dff3ccc5fa0be79b89473e08a3c30732770cb3c3e529ee6815dd6ad53e", "2e6b3efabfe40946515c7f15659b2aa3590b330e36d7c858c5e3bb50f8493a64", "3acc1733eaa1a48b027037573634328269d9ee198085495379fbde3d3561b7d2", "3b72a6c6452e71e537e8d3aa4310d57abfb2a1bd39f3808ef222ccb4af2c35e4", "47fc91290b2d99a471a62d5390e13369fcbde2d7820e08c209fb3a5cbb5713e4", "48058f6425b28d82fec96109d9371a8c30bb2fdac8c448370ab455013da0edd3", "4922012d4bb93a4b2944570f03d32ee064a1a9bb9d054f7497447207c70354cb", "4f1c100d801f078a8f45fbe7c101bd8a13e6c3e49ea83bcce661be6338c631bf", "62ac5775145716be2f3799face7ac9c5229122b93b3839e03f63334f548f0cac", "66c39ee8a38d1b91166e459fd655831dc3c0e41fc85a30827cf6c75a7ff28ccb", "6cfb468f2acb470393e7a66f69ebee1f614e5437813c8a5445bd4f4d8c546387", "714ecf13e9fa9ba377a692e78d31703215788cf7f64665e685f9006ab5a9f456", "83725937f6608b3c4d90bb64a4d8c2b50e591eeb06ba68a4f9c8574f4847cc77", "838a07670e92b7919a03d940142bfaca0daf8fd52b8c76e82861e65e05a37081", "85e109b3b868a3ccd1e12cbeb6a5334e152b94e788b9a961f5b99745b7c96ac7", "88f398002b7b629049adf26a9838bdaad15ab3d69f1cb44b6fd8c6db9a65d3d9", "975b6e927fdf5f27d7babd84028863f2bf857fc3e5db9a0faaf080fc211d9409", "ac3fa017c0e9e8a74e38fe69a205c89eb4a68c3abd4057236d062b79741a085e", "d49b31aa35c06a0aa917b8b78d25e7cf8808126d516a35a855e97079a08bc839", "fb6a8accfd51ccc7e6a38e9f3f2f3644f5b323b94ea22603cbae18d936600f78"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "Userinit"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "OYZjU6u8Rc"}, {"hashes": ["2770173b32bd4ea5e1a1557a6a7826a66a02945d3014696f150c27afbb3970cd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS", "value_name": "OYZjU6u8Rc"}]}, "reports_count": 28}, "Win.Packed.Dridex-9652753-1": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-execute-writable", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "feed-domain-banking", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "artifact-windows-task", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0002", "TA0003", "T1053"]}, {"bi": "registry-autorun-key-modified", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "potential-registry-persistence", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-compound-cta-activity", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "task-manager-disabled", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1499"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "windows-os-reboot-detected", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005"]}, {"bi": "pe-header-timestamp-null", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "sample-modified-deleted", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "malware-dridex-detected", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "url-pastebin-service", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "hook-installed", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "possible-dga-communication", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": ["TA0011", "TA0005", "T1483"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "mitre_attack_tags": []}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Dridex is a well-known banking trojan that steals credentials and other sensitive information from an infected machine.", "hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "5f1838a46e59c5e7da4f04c3664319d84060ce620e02466ced6b6805fcc2dc8f", "67444c0bcb5275fef229eea147e0ae667f12c252ed4acc853de341ccf717c019", "6763e8607d786b6e3e87f02a4456ecd654f2259bf5f15289a2b87d7c27ae1945", "6a93e92bcecaa046fae3632c8ac7cdfad8bf2f01fb729a5800e423cd50bf10b0", "6b37bc993b4cb450b1d46f0873a6d96e5d3d956964320c90c485cfb7d6dd8f6d", "72ab0dd7626d0d37dafcf9844f9fc43048692bb8cd2bfecf47d74ad2d3a1bf4a", "73faf3a500e7253308168eb9fb7a5ecdc6ecdd878e43e29e9235f78ccb16dfa0", "761c51385ee25c97c1f6f27c6cbcc19c62b18c6d8a484701f7aa8c2587cab288", "796af7f7744a320d086648b72bfdd26c96df1b7d490e5eec41a1391b49cf7bc4", "7996e57dbb44d6df82b582c1a9d36db5bf089891e713f00c0ff6d5fa585e71bf", "79bedc65fd2e77d08e89f6c0e9a9347d33fb1896efaab32166438fc3bca93fce", "7b535f6b2cd400e4d4d2a2e3d499789a10e6b6badd49cba9990b6621d714c019", "7dad4e722c96e908dbc87403671cdf90a7e6c6a6627619fdc1877f80226a7f60", "80832c6d30cac7c91a0cb1b05a3b7349b5341e9c5b2e024c61c22aa42ab14083", "822390ea0400c1926167a9dfca06a9cb3ca73a4749908ef7a09fd4115098b1fb", "86ae862457e3a7fef0f9d00d0f8703409a984b5d7847640d0708fd86f4694b87", "8d3cbf3852f535dd5cfcc9330318fba3ad630f142cceb64fa38cf16cc9cb3889", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6", "960d3e1053c308200cba2fdb6457e02d53faba6f1506870471d37cc93cae3053", "9754144be6e9a907c49ab6092a821acd7f8f12d5c648d8d674154f6b4ffc727a", "9f436fa6261f3f3608575f8b240d30abc60a70718c5683c2d550d1d78e894107", "b05a68c2542020390b57ccf00dc0c0ab9822f0f5f4e26ca450d93293b79d6ed8", "b2eaa7a9663c750e628bd7432e07de3f51c9672182c0f8275cdcb22571e59ebf", "bd0338c9b04c327b1a852e2785d13b0ed69458b6979d40e60e36b8fb2b948717", "be9cd4ed5a16a1163b057dd5555bc0aba46401df91b222a73e605d5c855af04f", "c40ee50bfa2cd533d3fb985b46cf47bb91df47f9a45c4f45563ecea5082a42b7", "cc23c69d5c15ab6ae676aa06f7268f0e16f20fb1eeabb728aa397ba4f0397e4b", "d9538307eec7b2599e40ca663ecbd054df342a6bcbc11c2fe2f7c09d3705c02e", "dc03f4e34142c454d58a32e39ddc641e2a3e5368d7e8d7b08260d6812d7aad52", "e3af63773f18b485c79a1a8aaa18694d7248e1ff318c8ea2e5e7c17f7b6e630b", "e7578902b4aa308db17dce8865be7d4ddab142dbbc77d917b4f6652d77a37ea4", "ec197b80d646f1405e9dc9d144bf2ce4e2a2f847932182106d4d6cf57e033502", "ed2a482d5c1ebf33910da08712ec652851275fac8c892fb96a831939f7d23565", "f0b552e06456ec91a15eafc6cf7f34fa9b8ea815ab1529ed13815d60ee0de2c1", "f509bd1df77944ec5cff51723e3a99c790aa499facedb9ca87f2640308b50b71", "fb68de332dad9a145b2e090b37cda414e6fb71fec31dedfd6fea0d9f5909077a"], "iocs": {"domain": [{"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6"], "host": "pastebin[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "ctldl[.]windowsupdate[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "cs11[.]wpc[.]v0cdn[.]net"}, {"hashes": ["1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "cds[.]d2s7q6s2[.]hwcdn[.]net"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]5ca1q4uxfr[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]g3qnqsnndb[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]0zy8tpfx9n[.]com"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]dccknkv51k[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]hfmkewmqon[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]fjsa1xqgej[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]jojzzmo319[.]com"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]emrg6yhetm[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]foscyatdl8[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]m3bkwkifxg[.]com"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]hn2ynro0b0[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]fpee4m9t1e[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]nd1bbz4hub[.]com"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]ia94lhmrfy[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]kathbhnhnc[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]qnonh08dda[.]com"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]ibxt71xhza[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]kmtsdchhxe[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]s4ccwmw1cc[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]mkbrswn3vh[.]com"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]jbwrbvvykp[.]com"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "host": "www[.]vuiu89yo3b[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]o3azfnymx3[.]com"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "host": "www[.]whafl92vhz[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]9hmgeby9t8[.]com"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674"], "host": "www[.]sekuasjzsv[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]ihagawyzsp[.]com"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674"], "host": "www[.]fzjhgpjlsn[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]vip7eamdb2[.]com"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674"], "host": "www[.]3gdtqkbfvj[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]arvcwyaoo6[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]bbjwkklfhk[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]sfqcxm9qp7[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]y4koz8z8zw[.]com"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674"], "host": "www[.]hys512hj0z[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]g3uvq4fzjs[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]bic5juarjd[.]com"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674"], "host": "www[.]hnlaivsyju[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]bs51qjwroa[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]zqealng26i[.]com"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674"], "host": "www[.]foupf18zq3[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]cr3jzxkbud[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]1avvkczeei[.]com"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f"], "host": "www[.]rdj0ryzlhz[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]x37c3x3dnp[.]com"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "host": "www[.]gy41yeulbb[.]com"}], "file": [{"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "path": "<malware cwd>\\old_<malware exe name> (copy)"}], "ip": [{"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6"], "ip": "172[.]217[.]12[.]238"}, {"hashes": ["0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6"], "ip": "104[.]23[.]99[.]190"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "ip": "104[.]23[.]98[.]190"}, {"hashes": ["16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "ip": "172[.]217[.]197[.]100/31"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "ip": "172[.]217[.]197[.]138/31"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "ip": "72[.]21[.]81[.]240"}, {"hashes": ["0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "ip": "172[.]217[.]197[.]113"}, {"hashes": ["0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5"], "ip": "172[.]217[.]197[.]102"}, {"hashes": ["1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "ip": "205[.]185[.]216[.]42"}], "mutex": [{"hashes": ["3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3"], "name": "PFj56iMKsJ"}, {"hashes": ["3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3"], "name": "WkkBz3Qxyo"}, {"hashes": ["3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3"], "name": "o8b7PtJR7M"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "1VBqqPzTVn"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "1uVylw4WXL"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "3IKz7YBSGu"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "7ethyspmbq"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "Vw6Hj3UYQA"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "e9HQx0cL3M"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "mgVq1nEhNd"}, {"hashes": ["43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5"], "name": "xRyslxMLtc"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "9UynUufeFs"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "JmTvlT2i7D"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "dOv4T9KmIN"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "g55vuWrUEW"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "iWrMosQw6b"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "iZdYYuQKKL"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "sOicSOjXM2"}, {"hashes": ["3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37"], "name": "upfbPmkgcR"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "1JFO5iykhY"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "EazZkhnQZG"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "8kvxNUrhUT"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "9eEHXzaXbm"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "Ee9GgmK94j"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "FOm9o6Abfo"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "VMMPtXV0HJ"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "N0t6pZYjYE"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "dkIBIqD2Bm"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "B2lHsywj1r"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "iEEQJmNrqX"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "BNoaQwNfHB"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "PetPCuMUj1"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "nUNyQm7bmi"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "L465t0qHcL"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "uDpGL9dFRW"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "c4ZeSXc05M"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "PGHICNNr6X"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "dPbeGJ9zk1"}, {"hashes": ["5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8"], "name": "uIqW197Gno"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "Wwa1Esptiz"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "f5u2VZrUcN"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "sA83xANLAG"}, {"hashes": ["56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5"], "name": "vNr8DXuTYL"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "4tnLiCL2JD"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "ySSfoANbv4"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "qijR93QXnS"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "VbUcJWZ9Il"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "XJFedT1tHz"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "DDV1GC8ltx"}, {"hashes": ["47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6"], "name": "PXjH1KSTyB"}], "registry": [{"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "trkcore"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "DisableTaskMgr"}, {"hashes": ["03dab5fe0779aac801d6285f17f490f8ae51183c1a2e7cbdb206b13111b3ae3f", "0418f08a4fef13558c8f426eb7f961aa841b24032bbbe53655145ed3df690674", "0c47a24ae823add156bca882fa300a92bff062ad31e97fe2d37a3831231b739c", "16c744d983bca8696a6a7bfeb279b0e1830d305b0c43b7af19d66b4c3a01ee69", "1a6b3e5dce5b54b9708ccb1f6266ff8d254552f772e36506fa232d449dd83467", "1b7997a259eb5c4041f84d8324899a6f22f4f9abfd78c67bbd2012dd9f13e89b", "1ebab68378aab36f0b69b87f9386e7a17824db8dbdd222d68e435630c0ca6b60", "2134653bf6399c3c4f644f180f1cc25e1df06b23f4caf88f6564c05c63f3879f", "24f042f2b48252826b737bab64e5c0ccc3bfc30bcf25d6ae20719857d693c2b7", "25b2c1192071eb706b6f22bbd96787a18415a746aa5482fba7b4246ed73f73cd", "2ac2bb4fba5129d9c726f55b8c334fcd28b74e27820980cc0b3d3cf2c710892c", "2b6193ddc4e7f230319b6cf044b867408fbe0a591a8fb292a7dfdc0f95cfec70", "2dacf810ab8caac316d8882ca7142401a62eb668c833b4d5c4553c8ef06771f5", "362dd12f7551a5ddbb280c52d9a6c9cb7e6e0689e7faae9073494241d11e4c29", "37f58d828b44f6a20ccab25724f7243bea2d264c3f1a720512ec226a1e40b710", "38cc673d93ffb5fcfce8ef36b22768e02369221a477d8f2ba602ea83377c07b5", "3902ec9ec69bebb5269e7af646bb053a54e5d09010380d5e4e8804e41cc55fc3", "3ddbc499b16f5372280e171d168aa70f99fb7c2ae15cca838b7b94d86f1043b3", "3e60fd2c329a08b104d6a72f595f9e33790bfbe47f9c267445bf0cbe6118d1a6", "3ee33904464e8208330eb8a3ebf26710d62dd744582d9cb88edd5764db8ebb8e", "3f0d5bcd9f5284d6c6c095adbd94f5b3bd5397c2ae1f0c2bd82ed9a0707fcf37", "43e08a809c018f8daa64ca5ed2e75f6b26209fd4e10548d606b8b9151da988d5", "47ad5299a4031f105472a0a49c06f0ed5c245e8efb4435284c61528d05b9f5e6", "56cc11335752d4f9f20985c7a81280b9b6dacb858a93210691627a9049b5eac5", "5d22395c67b000a845d93676cab780b9609a6d483b57a0fc8e25db98a8e392c8", "8fbd51da0d559d75e56968109554fc079fb253e3a16f1bbf6cab74c86b7525b6"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.CHECK.0", "value_name": "CheckSetting"}]}, "reports_count": 27}, "Win.Packed.Kovter-9651488-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "deleted-submitted-file", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-autorun-key-modified", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "potential-registry-persistence", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "excessive-tcp-connections", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}, {"bi": "process-explorer-suspicious-launch", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "pe-header-linker-minor", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-kovter-registry", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "registry-ie-zone-settings-modified", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "malware-panda-mutex-detected", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": []}, {"bi": "registry-systemrestore-disabled", "hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "mitre_attack_tags": ["TA0005", "TA0003", "T1490"]}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Kovter is known for its fileless persistence mechanism. This family of malware creates several malicious registry entries that store its malicious code. Kovter is capable of reinfecting a system, even if the file system has been cleared of the infection. Kovter has been used in the past to spread ransomware and click-fraud malware.", "hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "iocs": {"domain": [], "file": [{"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "path": "%LOCALAPPDATA%\\<random, matching '[a-z0-9]{3,7}'>"}, {"hashes": ["61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81"], "path": "%HOMEPATH%\\Local Settings\\Application Data\\vamato\\vamato.exe"}, {"hashes": ["078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6"], "path": "%LOCALAPPDATA%\\awany\\awany.exe"}, {"hashes": ["02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262"], "path": "%LOCALAPPDATA%\\tiqy\\tiqy.exe"}, {"hashes": ["287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11"], "path": "%LOCALAPPDATA%\\osihur\\osihur.exe"}, {"hashes": ["466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44"], "path": "%LOCALAPPDATA%\\cedavo\\cedavo.exe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405"], "path": "%LOCALAPPDATA%\\erikeh\\erikeh.exe"}, {"hashes": ["5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0"], "path": "%LOCALAPPDATA%\\oxyn\\oxyn.exe"}, {"hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a"], "path": "%LOCALAPPDATA%\\kohuly\\kohuly.exe"}, {"hashes": ["2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c"], "path": "%LOCALAPPDATA%\\ryruz\\ryruz.exe"}, {"hashes": ["4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "path": "%LOCALAPPDATA%\\ziwo\\ziwo.exe"}, {"hashes": ["61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81"], "path": "%LOCALAPPDATA%\\ybequs\\ybequs.exe"}, {"hashes": ["8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1"], "path": "%LOCALAPPDATA%\\ewema\\ewema.exe"}, {"hashes": ["925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930"], "path": "%LOCALAPPDATA%\\visy\\visy.exe"}, {"hashes": ["b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6"], "path": "%LOCALAPPDATA%\\jegedy\\jegedy.exe"}, {"hashes": ["b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b"], "path": "%LOCALAPPDATA%\\ykujas\\ykujas.exe"}, {"hashes": ["b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534"], "path": "%LOCALAPPDATA%\\pojuny\\pojuny.exe"}, {"hashes": ["eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc"], "path": "%LOCALAPPDATA%\\puxe\\puxe.exe"}, {"hashes": ["e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2"], "path": "%LOCALAPPDATA%\\gyly\\gyly.exe"}, {"hashes": ["d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc"], "path": "%LOCALAPPDATA%\\lycok\\lycok.exe"}, {"hashes": ["d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9"], "path": "%LOCALAPPDATA%\\hele\\hele.exe"}, {"hashes": ["d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29"], "path": "%LOCALAPPDATA%\\havoru\\havoru.exe"}, {"hashes": ["fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "path": "%LOCALAPPDATA%\\uhixu\\uhixu.exe"}, {"hashes": ["f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc"], "path": "%LOCALAPPDATA%\\oxasi\\oxasi.exe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405"], "path": "%LOCALAPPDATA%\\ulal\\ulal.exe"}, {"hashes": ["078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6"], "path": "%LOCALAPPDATA%\\ovuca\\ovuca.exe"}, {"hashes": ["02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262"], "path": "%LOCALAPPDATA%\\tezo\\tezo.exe"}, {"hashes": ["287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11"], "path": "%LOCALAPPDATA%\\ceno\\ceno.exe"}, {"hashes": ["2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c"], "path": "%LOCALAPPDATA%\\aveke\\aveke.exe"}, {"hashes": ["3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a"], "path": "%LOCALAPPDATA%\\nery\\nery.exe"}, {"hashes": ["466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44"], "path": "%LOCALAPPDATA%\\lanyp\\lanyp.exe"}, {"hashes": ["4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6"], "path": "%LOCALAPPDATA%\\zapy\\zapy.exe"}, {"hashes": ["5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0"], "path": "%LOCALAPPDATA%\\hoqo\\hoqo.exe"}, {"hashes": ["b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6"], "path": "%LOCALAPPDATA%\\idicaz\\idicaz.exe"}, {"hashes": ["b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534"], "path": "%LOCALAPPDATA%\\apiz\\apiz.exe"}, {"hashes": ["925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930"], "path": "%LOCALAPPDATA%\\sane\\sane.exe"}, {"hashes": ["b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b"], "path": "%LOCALAPPDATA%\\fapaqy\\fapaqy.exe"}, {"hashes": ["d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc"], "path": "%LOCALAPPDATA%\\uhewaw\\uhewaw.exe"}, {"hashes": ["d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9"], "path": "%LOCALAPPDATA%\\anywa\\anywa.exe"}, {"hashes": ["d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29"], "path": "%LOCALAPPDATA%\\luteme\\luteme.exe"}, {"hashes": ["f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc"], "path": "%LOCALAPPDATA%\\elyr\\elyr.exe"}, {"hashes": ["fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "path": "%LOCALAPPDATA%\\qeki\\qeki.exe"}, {"hashes": ["eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc"], "path": "%LOCALAPPDATA%\\folasa\\folasa.exe"}], "ip": [{"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "130[.]137[.]199[.]150"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "174[.]29[.]43[.]171"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "38[.]186[.]206[.]106"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "13[.]165[.]21[.]12"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "23[.]28[.]96[.]141"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "120[.]82[.]102[.]76"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "37[.]43[.]2[.]233"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "196[.]255[.]146[.]252"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "133[.]70[.]46[.]47"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "209[.]93[.]161[.]21"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "58[.]89[.]233[.]69"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "9[.]218[.]236[.]60"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "114[.]161[.]61[.]148"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "222[.]149[.]243[.]221"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "132[.]248[.]180[.]7"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "129[.]27[.]118[.]179"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "19[.]4[.]19[.]84"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "31[.]182[.]109[.]21"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "26[.]128[.]193[.]14"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "156[.]202[.]179[.]22"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "190[.]85[.]72[.]92"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "37[.]34[.]87[.]162"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "57[.]217[.]247[.]71"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "82[.]18[.]227[.]22"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "183[.]5[.]71[.]181"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "116[.]50[.]250[.]34"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "159[.]52[.]30[.]6"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "47[.]23[.]100[.]114"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "62[.]58[.]126[.]139"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "206[.]6[.]130[.]204"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "202[.]190[.]74[.]84"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "222[.]104[.]34[.]30"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "52[.]84[.]162[.]117"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "208[.]218[.]156[.]174"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "218[.]65[.]131[.]125"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "114[.]168[.]81[.]91"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "189[.]29[.]204[.]79"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "157[.]200[.]109[.]219"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "203[.]101[.]9[.]3"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "46[.]194[.]64[.]63"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "193[.]140[.]169[.]210"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "142[.]18[.]97[.]162"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "135[.]243[.]57[.]42"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "188[.]95[.]132[.]117"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "121[.]107[.]17[.]188"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "113[.]117[.]213[.]93"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "56[.]150[.]49[.]44"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "16[.]129[.]115[.]11"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "22[.]253[.]45[.]23"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "ip": "65[.]101[.]72[.]248"}], "mutex": [{"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "07771B47C1"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "07771B47C2"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "07771B47E1"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "7B73D8BAAD8790CDB372AEC775125CF3"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "07771B47"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "7AC86DF7C1"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "7AC86DF7C2"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "7AC86DF7"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "name": "1E30DD8379DF09B367ED09AA989CD32A"}, {"hashes": ["61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81"], "name": "046815C817A4259E72C1D93D13A618E2"}, {"hashes": ["61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81"], "name": "7DF04EDA"}, {"hashes": ["61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81"], "name": "<random, matching [a-fA-F0-9]{10}>"}], "registry": [{"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_BROWSER_EMULATION", "value_name": "svchost.exe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_BROWSER_EMULATION", "value_name": "explorer.exe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_BROWSER_EMULATION", "value_name": "svchost.exe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_BROWSER_EMULATION", "value_name": "explorer.exe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS NT\\SYSTEMRESTORE", "value_name": "DisableConfig"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS NT\\SYSTEMRESTORE", "value_name": "DisableSR"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\RATINGS", "value_name": ".Default"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_AJAX_CONNECTIONEVENTS", "value_name": "svchost.exe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\CONTROL\\WINDOWS", "value_name": "\u00fe"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\07771B47", "value_name": null}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\07771B47", "value_name": null}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\07771B47", "value_name": "3"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\07771B47", "value_name": "3"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": null}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS NT\\SYSTEMRESTORE", "value_name": null}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_AJAX_CONNECTIONEVENTS", "value_name": null}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.100", "value_name": "CheckSetting"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.102", "value_name": "CheckSetting"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.104", "value_name": "CheckSetting"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.101", "value_name": "CheckSetting"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.103", "value_name": "CheckSetting"}, {"hashes": ["010e4ad482c5914d3a78a61458488510b9ed8db046b2a6dcdddfe378735ef405", "02765a2b33bf8f5df8e937a028a1c4ae0d657a92f12b0ec931dfa638bdb93262", "078a2e6a56b950a0301584a562925ca45c50a8071d5e138fadfd6e4e9e35dad6", "287ee3435de5c216b9630e1e691bf55038eb2522531654f1fac71aa3ac4d0a11", "2fe72a30563a6b1645923e70cc425a4d9ab7575f238ce72b0b7582668998f99c", "3bbf8d8c84dba7a5fefaedd45e3ff97e7bc8ddf33d09cc4f6179804e3ec74f1a", "466f8347056ccf54ee9a6d00f61a72bf5d15c5d7b989fc24a8ba0fac492ffc44", "4d52df67ad0b0a6b597d1ff65c3803ced9ee00fd14c350591bc3aeb70f189ab6", "5444e29f2119d31a3c7a92cd951107ab73f88f40203b7795c610a2466b5b7cf0", "61572486c7b85038dfb85b92c6668bce1b08699b864b4769868b69ff207f2d81", "8e8b5c1bc0530762a0ce53b7147430318b99401d4f623e7c95f8ec5c1c23b3f1", "925b759ad21254ec6a3d98a862e96d943b74cfc554e012eea4e79e86c9447930", "b4ad2ba103801b84e0825f73fa72925d409d40a825c5ee618a12fee47e380fd6", "b608131d552e5ebc2288dfce9917926bf77eb9305ddb39168f4b7af2269add0b", "b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534", "d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc", "d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9", "d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29", "e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2", "eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc", "f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc", "fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKCU>\\SOFTWARE\\<random, matching '[a-zA-Z0-9]{5,9}'>", "value_name": null}, {"hashes": ["b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "pojuny"}, {"hashes": ["eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "puxe"}, {"hashes": ["eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "puxe"}, {"hashes": ["b8e67efa119d7a93c7fcadf491f091ab192a3cae4edcae03067d5b503522e534"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "3215B0381"}, {"hashes": ["eec997947b63ac01fdad67e2c607975bf818595ad118f4e8ce4ab996476435bc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "311EC67F9867"}, {"hashes": ["e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "gyly"}, {"hashes": ["e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "gyly"}, {"hashes": ["e57caf5025a27beb2a389bb57821860340840b7c174d859da77c89cf9bf580d2"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "7C8A3B38"}, {"hashes": ["d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\15946F89", "value_name": null}, {"hashes": ["d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\CA72B973", "value_name": null}, {"hashes": ["d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "lycok"}, {"hashes": ["d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "lycok"}, {"hashes": ["d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "hele"}, {"hashes": ["d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "hele"}, {"hashes": ["d2a0e6d676354bc724d9856aed8f7370a2ef299d803e765d4fa8c7651170fecc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "D2CC56A045"}, {"hashes": ["d45001ef3dfd6f248428068390a1a537f435667d4620fc259bce446bcfab33f9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "CBDF74B25C"}, {"hashes": ["d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\A184082A", "value_name": null}, {"hashes": ["d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "havoru"}, {"hashes": ["d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "havoru"}, {"hashes": ["fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\0978EC34", "value_name": null}, {"hashes": ["d6d907f0adcc7b05156f8dbfbbc1999bc042b2615dbab339bd6ce554cf863a29"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "70D8D8EA"}, {"hashes": ["fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "uhixu"}, {"hashes": ["fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "uhixu"}, {"hashes": ["fa6467b1831023bd919fb8c644e7c713484a71a9ea42738a0d9f3aab8391badd"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "BAF463AE56C8"}, {"hashes": ["f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\CABBA53F", "value_name": null}, {"hashes": ["f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "oxasi"}, {"hashes": ["f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "oxasi"}, {"hashes": ["f464857f1d29796bacde5d0c048de6e1e8f6d78b1fce1d02551e47cc8abeecdc"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE", "value_name": "4380A6F54C"}]}, "reports_count": 22}, "Win.Ransomware.Gandcrab-9645869-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "mitre_attack_tags": []}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Gandcrab is ransomware that encrypts documents, photos, databases and other important files using the file extension \".GDCB,\" \".CRAB\" or \".KRAB\". Gandcrab is spread through traditional spam campaigns and multiple exploit kits, including Rig and Grandsoft.", "hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "1626ee8339f6e1745af1fb3552c1b620ddb3bd7736815f3fdc0b20a0770bf3d3", "1734ff72d2ed93aea5d7ebe9a2855c135c3f1a21c25ee246829abc34f34dc092", "17bf5df57a5908f1ee320189eba987efefcba5331bf50a752e3ca17b7b4ec7df", "184a34e37e18d407f312fceef60440c69ff40e13933d9cf594c44a8332e1279b", "1898e5a00fb453f6ccc1e9472a6579db149875231d03015e82d18c19cb478fee", "1aff8cb8b0fe211a4d1ee0e8d1b00ceb7d39adcdab09f5c813986162828a3942", "1d2b3ce68a5b78cd8b7cbf855bb9a4fe211c36373930891f7ef20afeaf79d3c7", "1fa98d68396a4f9ca5d233fa37150a559e85f57a48b4550efe4043bbf6484126", "1fd6cc3bdc4b335ebe13c99c1482672e09c22e5adf5735d968417c0e6aea3222", "202e63012670dff0f583b83802f9d276ae4fe7ddd5db6f43b38b0d7ebc9a5f9b", "21027e8578ee73f88640d8589ba36312e35fef635444c533e40ad76e45fdfd92", "21161205d02749a429e598def1befa020940e241a574317a95683c22c505053c", "23b2863dc4d5ffa6f8f1a545e6c6566d4e97e5240385cb42364f2ef8ea260b0c", "24c648a4313ab678514632a4025586d11f5440b7b8ad393edfdccf16092a44df", "264280635aa4c29b336a6d10495c2e90e9204cbce112ec87d4e4e722f44a79ca", "277e084e79803176c9db0b58282dbf5237380acdf3fd465c7e51c4cfcb18dd7f", "27fe4e821de0477d473ab92164a432ccb3390456caa70bfba9592a803f31a92c", "285bf8028fcb67e1c70757f254c662235bf8d501bb3c15dd2af702365af3b739", "285f7bfc0a984b763cc321eefa29646c6db3e5f5b4e0a85ebcc29e676a5e794a", "2917a44591f05c2802eec53eb48dcad850dbbc1e3d368df50f9ac4e2ebddb692", "2a2ca4bd06a325163cfe20ac63c4db01e7dd9bcaa21e71c73dd943f07bd2197a", "2b5f7000510630d31016c3606d4ec37418b7c3ff64666f4dbbc07f8e8e475602", "2b65aaa251cdcb3585c7b09b7d989d58fdba308ae760615016fb4280edaf216b", "2b6d90126882b43da6ece8e94463d8a80efefca79c4681fc313cf105f601b64a", "2b83b225bc7c7c84d36b384087fe688072d151da46294444472fbda2e837fd1f", "2ba5b36fc2458699103841baaa162f21f31e956d89b3c3d73363cd9e0c6cd643", "2bc28fd6ae041cda600dc88946caf4833e3e08b6a4552af3bd76638ae6d5a0f7", "2be7a15e0d504c533e6f9d1401673e456268d61f213a9caa038497fa5b876e1c", "2cafae76d8e80cecb76205de4e1e656c33f025744f7efa331187fca7faa7745c", "2fa36115ee6c228cf13a176ba2e19a3b28462df7fab60cb80d6b569089e71fa8", "31bd8dfa8bb4998817525fbb8410bf79333f43477d1269438079a83fb25d9560", "31d373061dc43b07be3cba3cd0a1c907146a536ff68e99ab6a7ab1f5b3a1da71", "31f6c42586907bd70ac06f1617188bad6efdde81d58ea2c58c0cf431d0798ecd", "3341e7a9326d3b6e71c6d3f43ed61228df70ffa601af23d5fb55a51fa1e76ab8", "33c2b338e024c8e9517500265e3a96dd9952364aa48433ebac5085efc340aee6", "33e3c116da0260ad74a06be9edf134d64da9a01d2dcb207d531ff16a27156e6e", "3488bf5af389b523747dd02d682cd77076344016b8a8cd7c2bee24887c9e9556", "356bc6c8d0e19640975e80ba4fdc66e6af023b663cd717891a70b0f382e1184d", "35e337a4efd4b707d86340ea19a64be2d0799590791b67155a6e7005e5bad39a", "3716959750444d2afd9172a9ca0f0a0922990a7f15852d7a47898de987ee69f6", "373f9c233eba99718ca356ffcf22f68c4899cd2965a77bc912c0da5dccd4f203", "384ef1d6988f3dab29e4d2b1612038064174a6fccc79127b13f63da29dcfb5e3", "3889f330d8d1e1b3085a9f9eb9c01c84fc33b5f96e5cbb4407f23721af3ceb3c", "38d4e1409c16cd522602e9c2d9349117dadd51f8eb5f7c2df77cd746a54a1449", "399e277174882871abb3eef9a3a8081b3ff1759e1a7ebaa29d52a734c09f9dc0", "3b0be4e0745243dd49d68b05cc72011aaf99c2b153f1303a8d7126c6b03294bf", "3cd235eccd147cdbabf454bf4f8a1248f8bacdf5835e8697e9e054968bf2d5f3", "3ce4ad7120c40e81ce683abfc7883c8501c52b299136ca14e39eae1958b8ebf4", "3f53dfe3620c9847236f4796f11dd7c5ce0b80c4299a9c3aa11db458640a5874", "40e21813e20109b649f132fdad790748d05934f9e64486c6d136cfe63a0089f3", "40e88c7269fd1241f2bf22bdc9862ea7a38d9803cadb44391e37bcd9f9c440de", "420d6673c8b1467d9d9bc2896b74fd4676d7a4a77c33b8b53384331786f790af", "42f381a118705ed2938cb124622981210618cdc77b62df42fe2f96b0768c2fe3", "4444980a7c50e19631a733d3a8adf372c55094768a4b45be2ce8679ce6adc44b", "45e49f2347634f2138bc33b9fd0f61604534fb41f0826332dd38113efed95cd2", "464cde96da4b08bc195965be32be41afd063d8a366c26c99111b488d96aaa5cd", "467a68ff436636da94c3012dc4c6aeeaec9193e249531c42e652db8fd90dc241", "476511dc87fb8eae658c25e5f5176b044524a8cf9a184d441371b727d31281c0", "48c3fe7143114c0babe8b928cb8870b486d237650eadb0f6899bb6448b35cc46", "498ba52cd9bfd1222945055e720a906a6c610a0665ced229c80f81719e4ea6f5", "4e50629d600a63376901083f2efcd9ab41f0f7fbb05689e1e201e2e46a51da98", "4f90af462a885bb2672df0702a68f3966cb681b1b86c844547ea5d6b2647a174", "504280596a55387b75f22046f8404013618d5e81dcdf245fc0acbc6d7f066409", "52380f511fa92e08ee63e690724cafdcc6f6f9872253d5452c9231d2fae03323", "5261670c71ca10a32c96e979346969b7faee53c5d253677d8278220204a41d42", "52a13d72bc5b34ccf294b8773a184c92749a04c4d845ef97bb5679cefda03b26", "5320fc2a6bd1f291a917b04e13108e0ab283d203b003a0a1c1de42de7c3f4adf", "559a3b9e303e2cee775da2ae3946fbf3b282d0b98f5b9a3726e64a84bf0d1a94", "5643337984fe4e7e814c57478495cb834d1960aacead713f03dc7041ff85d7e8", "5694d0f844a95017901d4112460ac47ff8f556c1a486a1a51545245d2d56e3ec", "56dfd3b0acc561b261e6c4f0622c2efe74e3022aca3ce4456837147c1c21d6e1", "5718786f879ceb10fea7098971ad2965a9758f85184f2bc459f9d72a11572bfd", "5768392cacf3a79a0e8d9de097f341e52cc9e33f564855a3747d8d13053599c8", "5904b8adee5a96a972d42f346b8280699343fe819110f4619b9e9b1248442dd8", "5a98be02cd655b93e3799572f7b88afa40a80a21da9b311c8fba27b5ae624812", "5b9663d505629196da34eaf9c2b36af63261cf2cbdf502994a7c007809b11fa2", "5bb28a03ed4f556e3af7be3873e75fc625a53fef309d1bb6a0c6d774420a55d9", "5c3b5bcf97a6869811a52be628e457890964daef28392bbb3983c4a325692813", "5d881d39dc18c70af3cec8337af67bd1d9cacf2e58b397f1e74130667a183181", "5dc47e4d83bac2c7889f4fe0f4fb854e60647cc70f3ff44a3234a0512d19160a", "616abd0a790c3acfb25020de08f61886a6acc2ca02a2a8b8429a50b3ffc6739d", "621f53ea9c3116c08bfcca3d94e185d26ee641554d7db3728d12042576d6dc9e", "634c26f68cdcbf1799471b539bd2cb43974e6265df71038266d7b230c2f309ca", "64cd7a98ca0b69dbd35e79dd55dbe68577dab75f015353f2b4ff84a78626a340", "656b691ac56a26fa8374666537db59e95147c1f522ee3e20d7e91d56c983247a", "658433eb51c1fd6b70b25c4a866c6d7b23d9af68c19dd3bbefa4f19b2637665c", "65c5fef581f6cfe93a878dfb3bd52511d6686ed00708a87b46a29f59cc0855c0", "665ee68d6e3e388bfcd23d0fdc18ad98392e9e77735dab6d8407335b46bbb6b6", "680245353678d5252b32b59dec46d9113af96299e3ec08cdee622cdb25f06e91", "6885803e18ff44e9808b2fdaefb45d173d3aeab6557a7422b9eb9740e3c53064", "68bf14e91329142780c876463505e131c8fb7f57acd943786c3e2abce9f29cb0", "694dc701c84e05d51316ba5f18ec21223ca6cea21a759053ae10ad4fdd80df75", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89", "6b2cb652415ef6fccccdf9ffa5b0e93b71bfa9a19c8c0e51d81bb4173d4b53ee", "6b4f88bbef4b1342fa6f513c302851a8ce33d056a934a37906bc2fd26c67247f", "6c56ec4f1c8455798c017ddf333e4bef89ce8570a3e284b4a10e5b2fbb1e4ae5", "6e0fe4ae925e2177c589a793d6e8f008dda65e3a43154244b0479f3623b98bd5", "6e4d239919be90a191bb8f045c0d5da7c6826ef28f15b8b2f7d1b5455e6edbe5", "6e9ff63c2c181420bda061b8fca0804e0323500111d85a05cc1a5fdabe923ef9", "6f629496e6bd45292687c4313738ebcf87b027faab126085c1cef675c6f8002d", "6fa4e948762eba43182e3094768b0259a81ebbd5d4abb708cd5f8a1b2289a7c3", "6fca8551b857e70977d2d4d83349b4f1e2169dfe798f8ddbc3aa41eb87e4e4f3", "702babbd943711820c1fb5345f8fe78a42a898adc2d642da05d56041b31694ec", "718fc39603f6a52f9c95e6948bd53c5914d47e97c3d41f26a56a33114f219de5", "73962ae7c72a98429737c87922350c3fc44afc4d36ee610ba0dcc6644c3a9ba1", "7524089b70684f2bab8296dbf830126de0cc95b9b060102277fac1b6230ad1e6", "77649e4e39a5a12b384fdd520d2ed73bbb165b5d9333d6b2fc8343528188ff62", "77d5002c253eb31a2724c90d004eeaa2cf070619f23cbe4a1990c0fe8e3e62f3", "787be2f5c956afe17197deb6c5b6e4398e54861223d55f2f2cfe76c3f78afab6", "796e50f75e04665e867fee56fd5e4edd8de07a415954ec86ed6b492546792db9", "7b7f89b92254dff1522063ad1c6945a5abf51b620c992d5abeb94c2ac327ed48", "7baf332af87636915ca20ada5fd3a6a287f64af97b66e06068906e64c92bf0ea", "7c94185b1686d5041831ca0612a21a3f34010e5fa9748b6980d4ff4494df48fb", "7d23082f142baa833815e2cc10a2c5464dd3da807f796188656bd61c624e06f9", "7dd40d0e4ac4eac1459d3d35be3ccd49409131db0b7fef4983aff5fceaa5bdb5", "7e08c46097ff620253a104dbfd63d9417e001d6c488a8c7cda2046d500e3f0dd", "7e203b9da8f9e9264a1b9b24acbe9fa713690486e4cf97a00b66781b7d569070", "7e29847f9b4ce799fc3a85bf95a99e07b3cb405a3e8cb6cb710ab8c651bfcfd0", "7f6a21893c0bcfd968c687fdf728910dc5da0551fbb19ae702c83303b9c5fdd3", "80dcbbdbc42b46a1c3e3124394e2e04f9badb18244675f87c8bf76e7148570a4", "8228eb0d5d2720df340ad4afa7da14bbef1e77a7b846c2f6e0289766e9798798", "832ed01ebd0e9cc3f80d6686b6e8714c2c39597a3803db7c8c0be820e6567338", "835b3c9019d35bcbeef95ee42ebc08c08f2e5d44691f72927a285b8fd17f2586", "836fdf0f512a4d9126f1f729036b28455a1c196e7742ea27daa1772910c0a16c", "83908ebc9ecc1f9c9d6b32e06ab6054852029fae85bfa4da0a26cac6bd1c3cdf", "8450375c2aff08cd19340272417f5760a31d5d1d843a8c71f0084a2da8d39de7", "8786f5b9b4344105f5552d9a000700d6e94281c9c131650c7dd2e4f5ca3382be", "88e62dbfd67cc3cfe6122c45dc6acc42f485c4ca18b777c8739bf035cdfce1b5", "8a3a740cc1d36a553249f1dd0a5c0c01ca0e7763195d5da1222941aab97ed12d", "8ae1906f5094ec11fad609d8e59397cc98b3d57714c492c45d417494e9dbe545", "8b30f31b8026d29e9304e08e6bc0d29ce9f830d03d054b8c0954df44a510617d", "8b4c4a65ed5b157a4bbf6dfa6b21a101cf9ac7c9487e53e15561d55afccb1145", "8cebbcf6acf05215cec02b5de9bc96d9958b4f2ad38449716d2ee1e86a8a73bf", "8e3a2b396e6c0d2d57da596cedafa9c7fa53b96af0d865869888ce3822900230", "8f04001506ada97c2f02a9b116ec2b6cd74cd7d0dee213a86b3e7050f3294476", "8f2f9b7d4bea5626dec9c57820366518582b0083cf9dabb15d9631b0ef684e02", "8f55f691c635c9765750ee55ffcb87a850be96957d2c4d1d581c6bd7639100b4", "8f57780116b159e7e294bae16803d8e7ef47561f73c6d907a8a023cd2c0b079e", "8f9975820e932d79a142f32cd6ed26f6e82403e5fd801f911aa8559b9000c64b", "901b575fc0f120bf664d6496a4c08f25a64057805cf0242f3edf5283e78958ab", "903fe76c4151dd9657944992fca0a16c100b84b49a76034aabdd18c8cc059388", "918c9bdff4240ebcba9f6d228ba1887467a78c75f1d4b20971b661a21435fb07", "92ad3737913a6329c9c549651f9ebfea725f2219ffaa6ff6d6a4a7d13fae5ccd", "92d7cb53de98cb0d79802af91fde38dbecdc1cfb71f9154ea5124004dd00be8e", "9376925bdadebeea2df5706ab05306c36e46e63cdb062fb1d6fb911dbca7992d", "93fcaaa68c15ad7ff5dd795a7cbd1499c72f9e8f107dae9f3de5a75a40873e3b", "97abfcd2f0e42df0406fb8a40c0a1fe862cba0db29e33ce9bbc33d75869923d4", "9825db4a82900226fe03fea424c9d8753ea3389df026b7849eff25f29b030466", "990b1f311a66adbb4e693d60f62e8e986c906b5017cf2a418e7c95c3c9636743", "996d654415b235b1e8bc19695c6945c82e86572bf6da35ebb7abb12e88655958", "9ba77dffd5168cc4a6a60ac83146ee8037ae310c8965a5c96a4ffe17224fa7a6", "9d05ba85cd7be1aee48670b5ded34d27090a73de9b85acf5066a96b5509607ff", "9d45f748c95d471e554e0822659b2bad66b9ab1a57d16bf7c5b0e3a7656c49a0", "9e40dd6319e073088574e05f936a29b866f271e580fe2bc0ddc02350cab6dced", "9fc03bc5541e2c06c4e7fede7cd9f303f012c1501b552f777ffdf6d27bc22129", "a00b893150d36a9f82aa5289e86662c5523932039acecba5ea5d5c931383f35c", "a177f49edbf1314d7ec4e6870e7ae17cccd381511d74116eb8aa24b9de91cd5b", "a17a5cc3fddd3b47d49fed1a62372952d85f6ae09ed92de64c05688308b227aa", "a267cd9d2fe69499092b3034c238f96b9c97c285d6cfa32c3d62a5c620f778ee", "a33c3cd8394fb589e5b0239753914ed9b2c02554a3f0ca48eb6cc0045ac6555a", "a3a6a6c7888c87a306b9a5787ba5d326cad279df5811ce3461c2e3593b65f674", "a474cd7fafca6024e1e7da3ca177910cf48683690bd18787cc879e471543112a", "a4978c0b5b27f0f23e4a2cd16c4b657ecb7426bca2d066ab181f567dabc40964", "a5a71043fdc2707b509559ce7758b88327111cba9c386b2378470d6bf888d74b", "a7f909729885d8a9b2e2f39a223fb53c1133df01fbb74ce3bea78b41334dc700", "a8e0ff627ec20e6261bd268d2d1c72f696a4731c79d38097e3bb040b70c93e25", "a987a8b751249c3803e337353602c4887dd03d04d34fcde32ab86abe342f7eb8", "a98b93bcab247a3917f41246a46ff3102e943d0553e076237afb182d62f0ed0b", "ab8e43f068f5eccd943ec19fbe127a9d685011156e8597ae807ec46bf121b3a4", "ac11676ffacac10a26ba5bc22d19cc5989069d61090e36c6801363370edb4d18", "ad7c98b67547f89e74f3b02d397cf667279811bf6539a899535682c4ad35c96f", "ad8bb5a5729bb94da6a26dbf8f61477e6777de696bc6567a1c32c86b1a2acf20", "adbd619fa0f42faf7f1d818e3a2e762f8f165c4331477750f74fbbd47d3e48bb", "ae10452c15ffd4d2261d55ac966448d4e3ef7af6a70423bae4afd1973b80fb04", "af67f4ac40c17a1c136cd22d9b00b7d737c1979b4b21b75da2e72c3946b0cbfe", "afcb886a04617fd5d04de55e112d8de40ace49b09a66511421c273b05e2f09cf", "b001b10fa51115d0c016ea29ee87f73ec1d7f65165a89cb31c471c5267505622", "b2459fa548c4ce0b2fc36b74c8e257ba1b840d06d4835348e8a1819440be4024", "b290e67b9603b8145c3ffdc0a1294c3f6ed63d8d5a3f5cb71ad1b6c73c85d4f2", "b3373447f5ee5c905c7795e1191a52d43578f84e03a46607b9649df2b87ec273", "b4bc11b466466c945409df28f760c11be52ad6e2944836c836ae1e5289f9e238", "b6225d11dc505e088a771e7a7db449c7ec1cea3a660ee828f13fea25f5ae3772", "b7219a14ebd870515d96f87f0b3c4c0eb7db11854566e18030de34c822d29d4e", "b9e013653d9bcfe98d60e711f7a10f1146d36287462c88640d62be65d1ce9f8c", "b9ed22964e82758f9e4345867613ce6861a70f7f5251931b256f19b6ef1c7db5", "ba2e344c4317b400a38bf9bb5b3939e57f060d0810ed6814fcd0f1d8caa16e9a", "bc004faed8aa2646fe58ab63cfc76c578d66a356ed60ef0067af07ac3104611c", "bc3fa81debaa49bf15383ac4f334843bdb8fe96d34f75a982c8ce99b2284c0c6", "bd5199e7c3d0a9372d176e4b6b4cd59ac1ee59856f1b00b3aa3404fede7de751", "be91d1a30058cbaf3a2c94fcb6030a9c130945c9f41f41bddf59e025ff0b6e57", "bebde2964688410925a81bf0d9e6b6c38b3fc4bfe25f38b6e8607276a1317103", "bee5f89d7c99b166c7043ece1a1f6e19e6dd23dc831260586286d314f14b1dd8", "bee87edf057a1bda387d5a3b86e72a89cd5cd7d20f51c96cf72ff0abdced6a46", "befb808106ab95a5914e2a2d56e192f935817c2c12ac2866e9974e2fad03f967", "bf9ee9e0e5c7ebbf9341ec499de5af519b99dbe835e157524fa353d259dfc8ca", "bfc065b3945197e16a2176263b375c871f51ab2c3c75e88ccc799959010e7f59", "c0e0f95ef546c8f2a0187637f159bc62615174ad8b89579ae9c268d7a4eeec1a", "c10dbe47b9698d7afbeb31844f264ef25fb4de9a76c5fcb0c1d01f2e03298d78", "c1cbeb5e191503e1cd3cfa861d4858119426c659d32c5e4b5dbd8b13e7c447d9", "c3d1f6747e3a565bf15fd431bed02e114d00b6d8a407ee277be5fbe73f199507", "c537d06509ed9fe95de110de098ade4c4017742d80b7965d0a1eeecabae6ec29", "c5b01fa042ff4cf4c51ddf66f9a91d833dfe657ded5fcfe091a7248f92ce56e1", "c6b74de2524657089126161fa9d086f9e1bb8de4b71cf2e6110dddb535940cee", "c74f7244dd289fb4c8343971aa34d15c1429ff5aa2e5b07444a5cf6c6ff89100", "c79e04b7b4b45358a72c7004b6bff0a609c6dc1566ee0dda9e2803117235a129", "c85ac440f7a0a0bb70e8d01290629c4b6f3aeedf051b4d4c5025e15bb757484d", "c8776271a91779ba2357e3ad0ba377c88546f124d8243c411a2d0e1cc4061f43", "c90b224ecf130783724405ba9b16cbc011e8b748ea9bb203bcf2e653f3c9950d", "c93b9e7c70e1373843198083567023f0afdcd46472ada556cb11fd5584de4d16", "c95eef8513112b97ac191c99647b367b8f5e077d4dfe68020bf27b057c8d6ea6", "ccdac23f33d814e7bb433a3e4a3edf379cf8c5b55439d29451cc1edc31ad651e", "ce616c7c09d882a2c60b8083bbda0d0ab5471bba547fb8fef581e828687a56c6", "ce6fda5d671da70f09352211c44df8832825796c193d87e379a97e8a42701111", "d0023c6ab1264aee3348c17303bdc4dc45f3896f2cb57e3c576d75b6c5d67c5c", "d0b8ba3632871be81dd7945d92df5ed1d4c07d3c058a2ae7a6643293522b2a32", "d168fc28e6b1efbceaafecbe771028462040ba57c9273a10553b470e3ae4ee10", "d219a864527d91598b20cd34c18afc634f03053d603628f4ffb55bd8a4540800", "d2d70b03c88b86344146e79bf7a831cadca9c33ed229bd0f16fdc639e5a8c004", "d3070423c188c827504ec908b3ac4d027cc46f3b5ed3a22ba78bda0cebbd4cde", "d33aecb6d41b8b842fccd43e0b63dd7e6569c41987a3e38d63c78f4cf4dcb160", "d3a324f48a278b79ac42b489adbcabdff8b469caa99a4b13c3f239bfc3c4a653", "d41deb13804225f3ca93fabc247e399ec49082165aa26fda2b9120e55aa649ec", "d500e4f48ab9ef4f97fab8b25a4d557e929d38d5b199351b702f0305ce4fc6de", "d55780a742521ed58386b40df4bba9852ab0b14658dabd65f2136e6b757e142e", "d55d3ba74c9e7ceab5d960997a1038f7a55af078281b2a6ec446d3676bd6639c", "d6f11b1336a3bf724257f4c9e4518eab54de656905e382ec77cf0fe214823ab5", "d72fb4d6bcce4d4f81c57a8ffe2013c36064aba624059af1b500f9c960ab09e6", "d8180ddb0c5a5cb428a743c96a3729dd95de4d6f61420b9e286ed00db025f93c", "d8f2d09cd0c630ac2b3a6e24743ec747fd686e7c2247efd31f71df974173b982", "d922451fd23d6edbcf565d51890783feae1c87115e9a969522d5899d24802d66", "da1280fe25b78148d7cdbb760b50a676726787d3808f0aa1cd441199a6b6e267", "dacd5ae7c55e9d79298b8f1960f51bf914155ba13c4172c2b2a36dcde9dc5b03", "db1a512ad94da4a4dbe589beb84aac23b32b3b24fefd343fcb74ec083c20a9b8", "dc447895cac7f91d2d2146d109541b921a4b4d2b899eda49f60430656328dd67", "dd66d9bd2c8eb2b3e4a4313f90332e078fadf545c12d8ef8cb3676e46cfc57de", "de38da8926ef89a3e818c4cfefa44fe0941d64dde4b9906009ef826f7f07cfef", "e0e0673b9cce43b8b79098aedddd2fad8559c4c65c2a31549a827e554506ff19", "e15d080bc7b0638f00b05aaadefa9b257db1a902c682421a73ff96b66d85caf1", "e35a0fb3246f12b978c2ebb022458f13365b2fb30c7b5c7b3cf036dbeef927ac", "e3660a88d6bd26dec99819856fdfb5308bd98888de93f93ec58be4409eaf291c", "e3cd3602994630569476dd85b950750b1862d2adad915a059a866a9e34b803fd", "e414cf88ab67bcb629c15a194b48cf639fe23c3ac3a937e88cd4eed663ac699a", "e4737098581365376e38227480873f35f3ff5694f34c9e20ab07e6350b8fa856", "e4a6a8f1826321c75336cc61655726a78b02f6ddd042dded0f3d26dd13ab5f6c", "e53b3f072aaffd2102ff8d55526ea83ade07639f607ce7e748ad905c6b29fb05", "e6214996b6999ac0882489d6c14bc6aeeba0e76a7ddca3458ee6d3725c874e75", "e744fdd7d894d652375d5bab18fe3ff56d5f3298fbd65b2b08d181e9e4e74db5", "ea79f212e7f5fbb5ab8e00c8c6d47783abe86d7a96454e867e26c1e4786abae3", "eb78862851cf3bd0135c8537a33aa38347dd54ed1b8c386714818f2689ad8782", "eb9aeddf20809d940b3346d553b9ed65b8d349e8d2726f71eccac868b70c832d", "eb9d60b04693f766b388a83caedc9d5768b9f3ea0778c45776897194294aff1d", "ec490597e483c932a45646fa5dec28d307e68d0ae1b0c953f55585170bf88095", "ec7d25a18e961899b3e5cba424f97a581da8ca0f1e23ff1cb34f970c0cb1d463", "ecc5c16370576ed7fc0753d4d70bec4c9dc5382b00454715a93af96f162c44b8", "ede25ce75c301528a8c6067c2a5740f9236ab57ae977c1fc0495a620906bb270", "edf5bed341b38df0fd04883a351b612f5ef44b271c2d4b9b1a3f9dfe0cbfad10", "ee27f4df46a7e3d7a18019fe497f7a7827b907d63d8877843322ae3172df69c9", "ee6aa9b7e2b2ba8d910d6ec3e8c4e3d195f37cdbf0c9f82411a1a6080d76b32f", "eea5993f29e58dae197f20486011a9f46d2479c43120a258d9aee7442af8b4b8", "eefd6a0a5fbc56f78775415dd45fc61038c3b46077fd5be20aba8b1303f6da34", "f022e4f1767aea01fc766adba2241ae56ebe0836ea9baf691f5fd8d4089f2c0f", "f0569102132605b0875582861860b5db7cad296b4335f7752463b1c9bafae534", "f0d170c29fd92daa71f4ff289c291d925fb93bf7e3046ff3e306a758dfeb8081", "f19c6c7bce085624615eac6dd84d00caf14da37b4311e0468855cd4c418c5c79", "f3299cdeb61e47ce550f957611b4b2625604d085d9f322424e5f1c0bea94ceb8", "f3c7efcb7edce977a2668da750aa90e156f3bc3eb33208aa435063fb9d7ae3be", "f4625104eb8bc2136bbd61e3a93234ae53c10651cbd4afeb5c98301322f41376", "f82c6860e012985826afb7613278d32a94b47a675ef5c026e327d1987704e19c", "f8423de5ad6d38e04897115e7a6cbc88fd8170b810065c88d45d940289d51a21", "f97088e7cb7c67d53f75ca7018e35325a4ed1c4c34f814bcad6938330a76eb53", "f973822e9c5283003d46065edc82bbbd76d375fa3ec3e1ee8abf420b67898f2e", "f9c42a96d29ee2910b62821e434979a459c2b2cbcec62cd2ca5453697a2cf5de", "f9c58e3bc5e86c28598e624fcf2be797b5872d48b6400e743a32123eda295db4", "fafcff57db2e359dffaac3b31ec3906d7afb8fe9c34270be17c5b6f64e99a013", "fec3e413a789a8435e93d8ea70f16617a003a127dfd2671d4605993b749d0350"], "iocs": {"domain": [{"hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33"], "host": "ipv4bot[.]whatismyipaddress[.]com"}], "file": [{"hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33"], "path": "%APPDATA%\\Microsoft\\<random, matching '[a-z]{6}'>.exe"}], "ip": [{"hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33"], "ip": "66[.]171[.]248[.]178"}, {"hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33"], "ip": "5[.]39[.]221[.]60"}, {"hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "ip": "204[.]79[.]197[.]200"}], "mutex": [{"hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1", "012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4", "01a2f68f87c67104c3dff93db155290153d075887bbd66d332b224aebfa60e80", "02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d", "04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2", "058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04", "05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33", "05e18d1fead2605e36c089c4a2532f0d502a5894a8a15fb859837d0523cab73d", "0688c46a4b2af21735fa90188a855212f9bf0e24d04a80150ed99afea80bd307", "083e8676772511db5840e4d2e3582fac7bb869c82a7cb7b11af2791476345417", "08db1e474efd740dcbf6a0fac4dc93ca77bc803eef8e5ebdf85ff5495800d007", "08e8ac381eab35c6f8fedef1c921b3ca0c1fbc862cc8482aa817220fd1800c65", "0a6b83a865695ba7a5baf6337c115cd06358085cd2c174806fbd75837ffb49d7", "0ba338f0917356577dc6c00217ef973395e83f952031ca3df1bd2a1f14ffce89", "0c80a368fc9d5320b676f065c7fe95d4b2560b7fc557c3b5cd2d52d6cbc107ef", "0c80f42e2d6af784935e2804e124e5d5cee2ce62bf7bd19996fb81d3dc121b0e", "0d6b3d50621831eb2ba716d92d91eed97fa6fb3d194175cb2fc59bb6e50b8d3b", "0e5a46c96a9ddd3a61f68c19ffda0f9b12c76e1c3e7f2a4c4528d56c498f7828", "1126e29cef58a90b4910003530ec5d4ff17f09a09b4912a75575306d848b5a65", "119bd50529bb4cfefcf102346d4f14ec741f48c72ecab7b65417f76fbeae8bc1", "11c7e045e19f6a53ff5e904d7250b3218a14431ed5c7ad299668f11717dce3d8", "12cdd2a84ecd40578e34c33ba6530200e1fdd243e30bfc15e074251b0bbb5e03", "13909277ca03cbd8231fa197f36486c7b12f9cc78e0a3cfffe735fb2ec0f2909", "142ee3a78064f1c5da3798744113f522c0a95dc842a5cf1c1346c6d67cd54c0a", "1598fbecd257a923af9074477c0439991ee8f88e62f2a9544a4f03cb692e9ea3", "696d56500be0ad3635a17d93843cdbe9f2e4bd6c8109bec4fb41ca1dad748d89"], "name": "Global\\<random guid>"}, {"hashes": ["04f861f111b022dd602c129bd946958f92120540ed06d62b5cbb94d0ca2b2cd2"], "name": "Global\\pc_group=WORKGROUP&ransom_id=b40e575273bd4a"}, {"hashes": ["02e87ec6198f34cb3bda9acb77e970bdf652ac77f69cca8428585258c64f333d"], "name": "Global\\pc_group=WORKGROUP&ransom_id=b6be0ccc3ffd920b"}, {"hashes": ["058533b3a5d5eb1303bee5dc34e32cb9e8005a78cf9e403fd58ec29b541afb04"], "name": "Global\\pc_group=WORKGROUP&ransom_id=9ce43cac1686595e"}, {"hashes": ["00451581501cd66ea636e8d06e01638b1a83176d47a7c047538616ded1438ba1"], "name": "Global\\pc_group=WORKGROUP&ransom_id=f65cd88d6027eb87"}, {"hashes": ["05b7d5e69c6b9f13319ad0f629e652923e67a399106d950ea6fea9c23b45fa33"], "name": "Global\\pc_group=WORKGROUP&ransom_id=1daed71857822bd9"}, {"hashes": ["012404eb4006c06f055a1413d85fd0352fbad5cf142d998f8c33660fd12386d4"], "name": "Global\\pc_group=WORKGROUP&ransom_id=8f630cdf7a9334"}], "registry": []}, "reports_count": 27}, "exprev": [{"count": 16731, "description": "DealPly is adware, which claims to improve your online shopping experience. It is often bundled into other legitimate installers and is difficult to uninstall. It creates pop-up advertisements and injects advertisements on webpages. Adware has also been known to download and install malware.", "name": "Dealply adware detected"}, {"count": 2528, "description": "An attempt to exploit CVE-2019-0708 has been detected. The vulnerability, dubbed BlueKeep, is a heap memory corruption which can be triggered by sending a specially crafted Remote Desktop Protocol (RDP) request. Since this vulnerability can be triggered without authentication and allows remote code execution, it can be used by worms to spread automatically without human interaction.", "name": "CVE-2019-0708 detected"}, {"count": 2393, "description": "Process hollowing is a technique used by some programs to avoid static analysis. In typical usage, a process is started and its obfuscated or encrypted contents are unpacked into memory. The parent then manually sets up the first stages of launching a child process, but before launching it, the memory is cleared and filled in with the memory from the parent instead.", "name": "Process hollowing detected"}, {"count": 834, "description": "An attempt to bypass application whitelisting via the \"Squiblydoo\" technique has been detected. This typically involves using regsvr32.exe to execute script content hosted on an attacker controlled server.", "name": "Squiblydoo application whitelist bypass attempt detected."}, {"count": 637, "description": "Crystalbit-Apple DLL double hijack was detected. During this attack, the adversary abuses two legitimate vendor applications, such as CrystalBit and Apple, as part of a dll double hijack attack chain that starts with a fraudulent software bundle and eventually leads to a persistent miner and in some cases spyware deployment.", "name": "Crystalbit-Apple DLL double hijack detected"}, {"count": 619, "description": "A PowerShell command with a very long command line argument that may indicate an obfuscated script has been detected. PowerShell is an extensible Windows scripting language present on all versions of Windows. Malware authors use PowerShell in an attempt to evade security software or other monitoring that is not tuned to detect PowerShell based threats.", "name": "Excessively long PowerShell command detected"}, {"count": 274, "description": "Install core is an installer which bundles legitimate applications with offers for additional third-party applications that may be unwanted. The unwanted applications are often adware that display advertising in the form of popups or by injecting into browsers and adding or altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Installcore adware detected"}, {"count": 264, "description": "Trickbot is a banking Trojan which appeared in late 2016. Due to the similarities between Trickbot and Dyre, it is suspected some of the individuals responsible for Dyre are now responsible for Trickbot. Trickbot has been rapidly evolving over the months since it has appeared. However, Trickbot is still missing some of the capabilities Dyre possessed. Its current modules include DLL injection, system information gathering, and email searching.", "name": "Trickbot malware detected"}, {"count": 230, "description": "Gamarue is a family of malware that can download files and steal information from an infected system. Worm variants of the Gamarue family may spread by infecting USB drives or portable hard disks that have been plugged into a compromised system.", "name": "Gamarue malware detected"}, {"count": 203, "description": "A process was injected into, most likely by an existing Kovter infection. Kovter is a click fraud Trojan that can also act as an information stealer. Kovter is also file-less malware meaning the malicious DLL is stored inside Windows registry and injected directly into memory using PowerShell. It can detect and report the usage of monitoring software such as wireshark and sandboxes to its C2. It spreads through malicious advertising and spam campaigns.", "name": "Kovter injection detected"}, {"count": 142, "description": "The certutil.exe utility has been detected downloading and executing a file. Upon execution, the downloaded file behaved suspiciously. The normal usage of certutil.exe involves retrieving certificate information. Attackers can use this utility to download additional malicious payloads.", "name": "Certutil.exe is downloading a file"}, {"count": 138, "description": "Emotet is a banking Trojan that first appeared in the summer of 2014. It uses Automatic Transfer System (ATS) to steal money from a victim's bank account. The Trojan is distributed through spam that includes a malicious attachment or a link that downloads the Trojan. Emotet uses modules, downloaded by the original Trojan to grab Microsoft Outlook information, modify HTTP/HTTPS traffic and distribute spam. Once executed, it checks for virtual machine processes and injects code into the \"Explorer.exe\" process. Then it reaches out to its command network to download its modules, each of which can be run without the original loader.", "name": "Emotet malware detected"}, {"count": 54, "description": "Maze ransomware has been detected injecting into rundll32.exe or regsvr32.exe. Maze can encrypt files on the victim and demand a ransom. It can also exfiltrate data back to the attacker prior to encryption.", "name": "Maze ransomware detected"}, {"count": 43, "description": "A malware dropper has been detected. A dropper will download or unpack addtional malware during it's execution. A variety of techniques can be employed for the payload to gain persistence and escalate privelege if neccessary.", "name": "Malware dropper detected"}, {"count": 21, "description": "An exploit payload intended to connect back to an attacker controlled host using http has been detected.", "name": "Reverse http payload detected"}, {"count": 20, "description": "Command line options indicating usage of XMRig Miner have been detected. Malware sometimes uses compromised hosts to mine for cryptocurrency on behalf of the attacker.", "name": "XMRig Miner Detected"}, {"count": 18, "description": "A process associated with Microsoft Office, such as EXCEL.exe or WINWORD.exe, has started a Windows utility such as powershell.exe or cmd.exe. This is typical behavior of malicious documents executing additional scripts. This behavior is extremely suspicious and is associated with many malware different malware campaigns and families.", "name": "A Microsoft Office process has started a windows utility."}, {"count": 10, "description": "Tepfer malware has been detected. Tepfer is used to steal user data or download and execute additional programs. Stolen data can include FTP credentials, cloud storage service credentials, web browser cookies, and mail client data.", "name": "Tepfer detected"}, {"count": 7, "description": "Smoke Loader has been detected. Smokeloader is used mainly to execute other malicious software, like ransomware or cryptocurrency miners. Its initial infection vector is usually an email with a malicious Microsoft Word document or delivered through an exploit kit. Smokeloader uses various plugins designed to steal data from its victims, particularly credentials stored on the system or transfered over HTTP, HTTPS, FTP, SMTP, POP3 or IMAP.", "name": "Smoke Loader detected"}, {"count": 6, "description": "Corebot is a Trojan with many capabilities found in other prominent families. It features a plugin system to enable it to load a variety of features from the C&C server at any time. Known plugins include RAT capabilities such as taking desktop screenshots, as well as being able to intercept and modify browser communications and steal data, especially data related to banking.", "name": "Corebot malware detected"}], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2020-09-11T16:33:47+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Downloader.Upatre-9645450-0", "Win.Malware.Razy-9645560-0", "Win.Ransomware.Gandcrab-9645869-0", "Doc.Malware.Emotet-9733384-0", "Win.Packed.Kovter-9651488-0", "Win.Packed.Dridex-9652753-1"]}