{"Doc.Dropper.Valyria-9768469-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "document-contains-vbforms", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "vba-document-open", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064"]}, {"bi": "document-contains-vba-macro", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0002", "TA0001", "T1173", "T1193"]}, {"bi": "artifact-flagged-obfuscation", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "document-embedded-low-content", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "document-exe-dropped", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0002", "T1173"]}, {"bi": "network-fast-flux-domain", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "document-launch-powershell", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "document-network-traffic", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0011"]}, {"bi": "word-document-heuristics-compound", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064", "T1193"]}, {"bi": "feed-domain-document-network-traffic", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-snort-protocol", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "process-requested-named-pipe", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0004", "TA0005"]}, {"bi": "document-launch-utility", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "cmd-exe-file-execution", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "http-response-redirect", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "process-windows-script-launched", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "TA0002", "T1064"]}, {"bi": "document-launch-cmd", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "enumeration-netstat", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0007", "T1082", "T1040"]}, {"bi": "vba-document-uses-hidden-setting", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-windows-script-network-path", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0011", "T1064"]}, {"bi": "document-network-get-exe", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0011", "TA0002", "T1105"]}, {"bi": "process-send-icmp-traffic", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0011", "TA0007", "TA0010", "T1095"]}, {"bi": "vba-document-import-dll-function", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "TA0002", "T1202", "T1129"]}, {"bi": "document-launch-vbs", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "document-network-launches-script-cmd", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "vba-document-uses-base64", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "vba-document-opens-binary", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "windows-util-tracert", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0007", "T1046"]}, {"bi": "html-small-file-redirect", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": []}, {"bi": "process-wscript-nologo", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0011", "T1064"]}, {"bi": "document-launch-javascript", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "network-opendns-malicious", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "mitre_attack_tags": []}, {"bi": "network-dns-doc-network-traffic", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "mitre_attack_tags": []}, {"bi": "network-dns-malicious-snort", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "mitre_attack_tags": ["TA0011"]}, {"bi": "network-snort-malware", "hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "mitre_attack_tags": []}, {"bi": "process-long-cmdline", "hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8"], "mitre_attack_tags": ["TA0005", "T1027"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Valyria is a malicious Microsoft Word document family that is used to distribute other malware, such as Emotet.", "hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "142fbde8f0ed0392402e39accf80649cf37edc9e67662eb74c214eb6566302a5", "1747795ab70151ee92bc7b137fed9113751696978c2142f48d06d1b28b6ef752", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "46c4d5407510f539b60baf782325bc13725c6f0ac0051e550d0fcd55ad96d5b6", "4a79e639ccdf548998e0bb4472a3e30d67097fa767b71f97580204e94123e2b1", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "5922457d20c683917861b1692c986ca7165353991bafadf5b7f97976b098e2bf", "5c4f89b78a4a4385a59e37e8f27addd76ba92ef6bea004efe8df0cc3b64e0cd2", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "9deea1e83272e064cb6a8e0c079f68d910c61a17266f5db971094273d67adad1", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669", "b98304c14d58ecb573da25eed30c09708f5524f92f727db4dd2681f22245b473", "bfef80bd7d70487b1c54a67a71e90c38851d2db3c5d5c54e2cee8286eeb97240", "c2b7900add029c2c3ba816eec67791a8f255d91717f29dfb15d155886e06ffc0", "c4284158d304cfbd887cca4996d55cfaf17144d9646148d63a820441213757e4", "c76f2341f33937f6f461f22c5432c4fe0c57cdd2d6845bcf1f93e84e9531ecef", "ce24d3bb0182d04442fcb9e687d490b059a47ad7e0067fa3bd0b5f727012e37e", "e16ace3d9cd7c9e5b5b93bdfa06288a2c33257f031cd4f4d9fe0e4600fc52dfe", "e371630cbb2ad2fc707bf609300f8c9e62feb97aa7b0e49b3323f2bcc88de13f", "e5ed6af7543f4f80cb57cb181813154dddedd1cde3cb1d26299e129de2b6fd32", "e68ef7fe4877bbea56c521a2e6ca6ef189ada631a760bdd3ae22ea2a5b9a8d25", "ead9557faf5b5514bb9684358691cd6ba72e6a9b1d6b93ad297aee5d8c64eec7", "ed79dcd0494a21b17eca529511a0b8c2ab3fbed4b082d40149d870fccd7e56ab", "f1e36bd80f339f416ae8cc9490ad654a01fb86fb095cff2128015c0ee1399054"], "iocs": {"domain": [{"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "host": "chiark[.]greenend[.]org[.]uk"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785"], "host": "1[.]0[.]168[.]192[.]in-addr[.]arpa"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "host": "ctldl[.]windowsupdate[.]com"}, {"hashes": ["13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "host": "e13678[.]dspb[.]akamaiedge[.]net"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "host": "secure[.]zenithglobalplc[.]com"}, {"hashes": ["2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785"], "host": "lxj[.]vvn[.]mybluehost[.]me"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "host": "cs11[.]wpc[.]v0cdn[.]net"}, {"hashes": ["13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18"], "host": "auto[.]au[.]download[.]windowsupdate[.]com[.]c[.]footprint[.]net"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "host": "229[.]197[.]13[.]212[.]in-addr[.]arpa"}, {"hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3"], "host": "aonefire[.]com"}, {"hashes": ["4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42"], "host": "a767[.]dscg3[.]akamai[.]net"}], "file": [{"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "path": "\\MyImages\\presskey.cmd"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "path": "\\MyImages\\presskey.jse4"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "path": "\\MyImages\\presskey.jse5"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "path": "\\MyImages\\presskey2.cmd"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "path": "\\MyImages\\tlofgkkjl15g5k.vbs"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "path": "\\MyImages\\presskey.jse"}, {"hashes": ["2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785"], "path": "\\MyImages\\presskey.jse1"}], "ip": [{"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "ip": "212[.]13[.]197[.]229"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca", "24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "ip": "198[.]54[.]126[.]167"}, {"hashes": ["2e4e9f88b324275f54d7da18c45bfdaef4dffcdbcf74abdd10ef52ff8e06dbe7", "3c2068fd550c6f7e49c0bca430e8b5bfe01d622664a8cf4df7390368165e06a1", "445be5b0d364fb3a0fbb95d9520668e1381c827c3c8ccaf3b5354f8be68ba5ed", "4ff84daba070222612ea822569260e1a24c21453eaa8647e98ce8b97a2c74b59", "620c0f6ba309363d466cc3128ebd9dba839c2698d7b9200b69928a46ade48c08", "64354d6d5fd79d411047546bccee5a0d8172fb441339d31af4302e9d22a78251", "6f9bb1b5002a941594c5486e18fc4da814bd0a31ea87c1068b74cb47b8cfa785"], "ip": "162[.]241[.]253[.]225"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "3624e7b0af4de82e10b32a05c02583f97deeb68a438906eafd081617aef0f28b", "43968b1964539af7e324020ee115c9077ae05343d12049af64e3044162658a61", "7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3", "ab756f9a44ecd9dce64429f0954a7569eb42caf72211c1742306cfb2afe7c669"], "ip": "72[.]21[.]81[.]240"}, {"hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e", "8a8cf14073821bd0b835b3e6f9c901b72dff9a2872ce022ff54729ef4f8061f3"], "ip": "173[.]231[.]210[.]20"}, {"hashes": ["7db6bdadbf208eaccb3407f5a49bf9e9d30b9ab4cc8b13c588c0a5cb8a957a8c"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["4b3bbbf1989dc44d5b5585110c8617cf747f611e7e64f0995bb92f09d49edc42"], "ip": "23[.]3[.]13[.]154"}, {"hashes": ["13d90425013b1b9d5bd36efad568c8aa6451aba613c11e8bc38380dc778e3aca"], "ip": "8[.]253[.]131[.]111"}, {"hashes": ["a4b183801d7b9d6deb9c9d0cdb87e2826f098d0e8728b27961750f9e279e0a18"], "ip": "8[.]248[.]159[.]254"}, {"hashes": ["24f8059fb0b81524cb8a7d389b52cc85d439eb70529b8b183876476400487372"], "ip": "8[.]253[.]45[.]248"}, {"hashes": ["55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "ip": "8[.]249[.]221[.]254"}], "mutex": [{"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "name": "Local\\SHResolveLibrary:C:/Users/Administrator/AppData/Roaming/Microsoft/Windows/Libraries/Documents.library-ms"}], "registry": [{"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\RFC1156AGENT\\CURRENTVERSION\\PARAMETERS", "value_name": "TrapPollTimeMilliSecs"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCR>\\LOCAL SETTINGS\\SOFTWARE\\MICROSOFT\\WINDOWS\\SHELL\\BAGS\\68\\COMDLG", "value_name": "TV_FolderType"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCR>\\LOCAL SETTINGS\\SOFTWARE\\MICROSOFT\\WINDOWS\\SHELL\\BAGS\\68\\COMDLG", "value_name": "TV_TopViewID"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCR>\\LOCAL SETTINGS\\SOFTWARE\\MICROSOFT\\WINDOWS\\SHELL\\BAGS\\68\\COMDLG", "value_name": "TV_TopViewVersion"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\RFC1156AGENT", "value_name": null}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\RFC1156AGENT\\CURRENTVERSION", "value_name": null}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\RFC1156AGENT\\CURRENTVERSION\\PARAMETERS", "value_name": null}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\COMMON\\OPEN FIND\\MICROSOFT WORD", "value_name": null}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\COMMON\\OPEN FIND\\MICROSOFT WORD\\SETTINGS", "value_name": null}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\COMMON\\OPEN FIND\\MICROSOFT WORD\\SETTINGS\\SAVE AS", "value_name": null}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OFFICE\\14.0\\COMMON\\OPEN FIND\\MICROSOFT WORD\\SETTINGS\\SAVE AS", "value_name": "ClientGUID"}, {"hashes": ["0763afbc2854ad1a778ce74d34384d70ea4f9700108529434579e2452e7616e8", "55a3e9bd013370331847bbf9838d9adf2f995f6676bf1f43afc81d6c42d42c4e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\COMDLG32\\CIDSIZEMRU", "value_name": "6"}]}, "reports_count": 25}, "Doc.Malware.Emotet-9766089-0": {"bis": [{"bi": "modified-executable", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "document-contains-vbforms", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "macro-contains-random-vars", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "vba-document-open", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064"]}, {"bi": "document-contains-vba-macro", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0002", "TA0001", "T1173", "T1193"]}, {"bi": "document-embedded-low-content", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "wmi-process-create", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "TA0002", "T1218", "T1047"]}, {"bi": "powershell-encoded-buffer", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "TA0002", "T1086", "T1202"]}, {"bi": "registry-powershell-ras-dll-loaded", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "document-exe-dropped", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0002", "T1173"]}, {"bi": "nginx-webserver-detected", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "process-long-cmdline", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "document-launch-powershell", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "document-network-traffic", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011"]}, {"bi": "powershell-encoded-obfuscated-cmdline", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "powershell-remote-code-execution", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "document-wmi-process-create", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1218"]}, {"bi": "vba-compound-random-network-communications", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "word-document-heuristics-compound", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064", "T1193"]}, {"bi": "feed-domain-document-network-traffic", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "windows-utility-downloaded-artifact", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "url-forced-download-prompt", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1105"]}, {"bi": "network-downloaded-executable", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-snort-file-exe", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-dns-doc-network-traffic", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-dns-download-executable", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-dns-malicious-snort", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011"]}, {"bi": "vba-compound-random-generic", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "registry-service-with-autostart-created", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0003", "T1112", "T1058"]}, {"bi": "currentcontrolset-service-added", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035", "T1060"]}, {"bi": "document-direct-ip-traffic", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "network-file-downloaded-to-disk", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-snort-policy", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-http-numeric-ip", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "TA0005", "T1071"]}, {"bi": "network-communications-http-post", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "network-downloaded-executed-from", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-downloaded-executable-service", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "deleted-executable-in-system-dir", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "pe-uses-armadillo", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-downloaded-obfuscated-executable", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1027", "T1105"]}, {"bi": "pe-encrypted-section", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-filename-mismatch", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-shellcode", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-flagged-obfuscation", "hashes": ["b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "cta-static-analyzer-malicious", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d"], "mitre_attack_tags": []}, {"bi": "network-dns-category-parked-domain", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "pe-imports-empty", "hashes": ["43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "mitre_attack_tags": []}, {"bi": "malware-document-av", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "mitre_attack_tags": []}, {"bi": "network-downloaded-antivirus-flagged", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "mitre_attack_tags": []}, {"bi": "network-snort-file-generic", "hashes": ["c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d"], "mitre_attack_tags": []}, {"bi": "registry-shell-default-file-handler-created", "hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "mitre_attack_tags": ["TA0003", "T1112"]}, {"bi": "file-handler-registration", "hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "mitre_attack_tags": ["TA0003", "T1042"]}, {"bi": "network-snort-server", "hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "mitre_attack_tags": []}, {"bi": "windows-util-tracert", "hashes": ["cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "mitre_attack_tags": ["TA0007", "T1046"]}, {"bi": "network-snort-protocol", "hashes": ["370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4"], "mitre_attack_tags": []}, {"bi": "enumeration-process-tasklist", "hashes": ["370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4"], "mitre_attack_tags": ["TA0007", "T1057", "T1007"]}, {"bi": "potential-registry-script-execution", "hashes": ["b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-numofsymbols", "hashes": ["f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "mitre_attack_tags": ["TA0005", "T1027"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Emotet is one of the most widely distributed and active malware families today. It is a highly modular threat that can deliver a wide variety of payloads. Emotet is commonly delivered via Microsoft Office documents with macros, sent as attachments on malicious emails.", "hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "498851ab9ce69c8a81c7e61242bc6897b23a7d9c7a5d961cfa1eb17705de72dc", "4bf59afb77b6c07c47039cb97d4498853fcb96aee97d91ea04e96ad6df7d5420", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "56bbccebdcb610eaa0cdb7974824650a7b197b4881b80c3f40f08b0c11730f17", "5ce29bd706cc814176635cf7134f9cb9220e06390e5791fe1993289a93a27e3f", "5d3df9c2456b7ce750073492a426f7769a92db04ff230f7d4a15eb20384dd207", "60c1940cbb1f4f14606e0ba9449c92b7f1ad6c96a1749f98d29f3cfd2df3246a", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "63dfb07c5b9fcb4fdce014b1a639a20198b2e1999defcab1bb6ce7f55ac02ae6", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "667c568b9e49ed53801f5dcd122990fa693072f9778e7d326410f2e7c9c74b25", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "7f31e09db1f488e4f6fec7662774f13150ea94c0dd43b241b895478e97b8951b", "8a9f026ac052a9e2d24026fc82ea974bd8334a93ad7b246ca0138789df5a4fb2", "90557068d83b6831c8b3886d716b372f3e6eb63f825977da29168cfac4aa42b0", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "9c2e02ead173d8f1fe22a0b2adf237ebd75b82444b7ca8747e428e3e02f9ff58", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "afe4b0126503160957ad828cfc4a0b7ab7d596b12ffcb2e638bcb6d8e27a925e", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "b7316ff994a544292992187c0aa79638627c6c73a68834e1a676e0ee5d84fad8", "b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "c18d26648d361c7c52164f6987ea197d93a43d055247acad10999b8d896ff8e1", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "cfa192152b91ca66d3eeb3fe08178911f479d41f5dc2263dc2bee0c6fabc7a00", "d0b498f52359929c28147dc98237acd28807ec11e4f92c158684a280c8f637d4", "d1ae30d99ba1693d44ab486f81acb82fd54e97eb6b05bd956a9a00f58dbacf93", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "d42ac9f9a2d8369507f871146d68eb3fe289674472a294a75fd89807ee210f11", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "d66544e5524a347a13a7f1331dadee13889c03138e7b6d23f4274e2ce196c442", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dcc3ee11da81996e905f2f00e24483150c0c38eebcfa3d3a8019a6ba1a098b34", "ddaf0947fddf5b96b5f400cbb0e39fdcbabe7cdad86a387880bdfaccb41c3356", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "e1823ace02b32f55d504e6b3dd9216cd2c11f9df3497aea11df0319d200e402a", "e21d580a7e305f1fc082d5ad925733d9d4261d14102ac3dbb7838969d9a472a2", "e2294bfc65c32ca2397ecaabcff4e7eeef9c910d9c4c809bfa2980ca98923b79", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5", "fab310e91d04203eb4a5911d81b2d387893e1913d380f5bd01a0d7d28bfbecbf", "fe991a16da24d1c8f0636d119212f2a98ae181c40849d2368f674db5209da44d"], "iocs": {"domain": [{"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "host": "boys86[.]com"}, {"hashes": ["0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43"], "host": "e13678[.]dspb[.]akamaiedge[.]net"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "host": "www[.]cloudflare[.]com"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "host": "fepami[.]com"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "host": "dacyclin[.]com"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "host": "www[.]business-management-degree[.]net"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "host": "xnxxfullhd[.]com"}], "file": [{"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "path": "%HOMEPATH%\\FY6iR_w"}, {"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "path": "%HOMEPATH%\\FY6iR_w\\bD8J_41"}, {"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "path": "%HOMEPATH%\\Fy6ir_w\\Bd8j_41\\E0c6vgg.exe"}, {"hashes": ["082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5"], "path": "%SystemRoot%\\SysWOW64\\<random, matching '[a-z]{8}'>"}, {"hashes": ["1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e"], "path": "%SystemRoot%\\SysWOW64\\NlsLexicons0046"}, {"hashes": ["219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952"], "path": "%System32%\\user32\\tapisrv.exe (copy)"}, {"hashes": ["082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b"], "path": "%System32%\\spp\\store\\2.0\\data.dat.tmp"}, {"hashes": ["4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f"], "path": "%System32%\\uudf\\msiwer.exe (copy)"}, {"hashes": ["788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464"], "path": "%System32%\\Windows.Gaming.Preview\\tzres.exe (copy)"}, {"hashes": ["41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c"], "path": "%System32%\\mcupdate_GenuineIntel\\poqexec.exe (copy)"}], "ip": [{"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "4c63c7e06daab078d631af54f867ea7d069092968d6f13eebe34486774a74d9f", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6999769977b28dd35bb2f5e22944e54b7fee9c13aa8908d10eea12612e3c741f", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "723ad8fff1ad9fbb63972923c3e1ea2c49e11db23f74c5ae3acb860016b03853", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "788189d63fcc4296c975a20a5ef964d6f038f7000601a259725c58bf5c9a1464", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "94097ebfa15f3baece5e692831305b0e4efb4463b935f178bc21ade65ae153f2", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "986bd93ac718512981dfa5118d7f043ae53e5a98960036804641a1c4b72610f9", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "d2a53472bed9983fbe70fded160dab1daeeb0cb578c4d6c163676f77e43e61be", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "d6cda032e7df92aff73e44931d76781d4ca24e786bbc1f9ebdf79cf5e1138d29", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "dfcdb536accbcb381c0e8fdce8b564d5b55170e4fa76344db413d98ef784dfe7", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "ip": "62[.]234[.]99[.]30"}, {"hashes": ["082b657e6fc18dd578b33ff31b260c6951ccebcb4cd71e19852a609ca723a27b", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "2df2c1608e75dc3162882ed50ee37c43d174deb4d1ce6fc85fc1386efb6a1b71", "2e5cf7a36eba949a076059c64011466d48fabd37a7ea5a23bddf0f63de7e7952", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "37ab1a64ee62c8f9b5d4241f788ac2ca6bfe3239460f411f848b7b1baf187976", "4142cb49199a7efe52b944caff9ab5b07d61438a9fc89a413199b2f801aec9d8", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223", "60ebb60bdbd9d062410367b982c74e9f4d3a5a857f4b3cbbfd64f9521d01472c", "625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "777b6a434b732b8d95d1e2c4bd8b00c978e9bef9fdaee55fbb4a71127713d9f9", "7789a5ea12217e4890eed699d3532cd98e0d71b7178bb51f11e76dc34a3da27f", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a52a345e198703c958101116276dc5571bc3bdd443e6709d22b638951416baec", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "b91795826d1ceca51e57aeb1aa43ac0960c1aed23a0a8ea2949528f7a5938598", "c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f", "da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ed6a09b946bf2d0e165e127338627c31a14251c59de261af19869571edab0ae5", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1723dc5abdbdc2d4012619049b77aa047b7a5011cc4ffa7f8abbb7f6c6881d5", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "ip": "174[.]113[.]69[.]136"}, {"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "0bf1382d9493a03c8b56f2befa1ada29ce2ac87dbde3a1c02a0742a95e630a5c", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1a6ee7bebb2357d095b418809d640b0d6f806698e8657de50cd48c93f0e92d74", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "3345219199def661640c5182b7491c413702216149790bcddd8d884e9bcd112e", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "374479a115841ea03babcd76b6245d0123aa969af8f5eeb27277397ce574562a", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "6abc1726cd059afef29ff4ca05ef48445a931969f6db0f9e90becb790f485e83", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "713f58d4582847587a9672a604bd31ce604ee2c1e3a3781ef7c17ac2a25aac59", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "79ab06bfb913fc7b0f9b17d8fbc499e383008a0d8f7c46c3c94fcbe6c7baee7d", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "9f37f633d32573f331d84cdd6f9b3dd9d16f19f76eabd14880f309a6cab2ee54", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "b50d8b3484a8116a3e3c4ede8ba464455431623dcb44c7918cb1b372fae8c046", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f9941a037eedbe3680c56f5bb591da63f5110ee3ab1b8b773617cf531b0494b5"], "ip": "51[.]38[.]124[.]206"}, {"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905", "0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b", "12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00", "14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d", "17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01", "369580713eae08e2f56eb5350eebcc9e3fb28e1f88abf5b18b726fb6ac50d843", "41a035835264e22d0533d34539e7ae0db8573b8b7bb013a5ad3fddfc6965884c", "43be6d6834d6347397c37b76980ba172a1bf750ee9c89cbf6c125df91e916d47"], "ip": "91[.]105[.]94[.]200"}, {"hashes": ["219b5d039e4a109011e021799762a7dddecbc2c5e6f75294daac8bb6454790a5", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7159c5f4d47c0a06c5a0e756884afde6cfa59b3e3bc575c7a31090c452dddcf7", "7d1dc823474b31494db6b7952b36178313dc9c253934583398554aaf04d4fb4c", "a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7", "d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f", "d8e2fd3919df4b2bd8dc7d2910719e451244b8b4cb85280567eda7ca8dc755d8"], "ip": "155[.]186[.]0[.]121"}, {"hashes": ["1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "ip": "208[.]100[.]26[.]245"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "ip": "172[.]67[.]176[.]226"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "ip": "172[.]67[.]139[.]128"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "ip": "104[.]18[.]54[.]117"}, {"hashes": ["d64753842bf0d8413fab16e2b4f48fa311d7eb3f1ce485fd003052016e3c6b8f"], "ip": "157[.]245[.]178[.]49"}], "mutex": [], "registry": [{"hashes": ["0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Type"}, {"hashes": ["0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Start"}, {"hashes": ["0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ErrorControl"}, {"hashes": ["0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "DisplayName"}, {"hashes": ["0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "WOW64"}, {"hashes": ["0849d06487556039dd4ce57a9338b26c767fda17fbbb5e5876fd1090295ced11", "195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ObjectName"}, {"hashes": ["195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ImagePath"}, {"hashes": ["195497c9eef9d1ebcd88ff1072c76da4a9e2ec082f586c01c493d28f70c386ec", "1f51bcef87e327d29ffad24ec36cb016442f41bc9d06989b527e05c0b79550df", "370530ab4dc609acab76596c874f60ec5b1969fe7db26584a036286572a7e0a4", "45af7091348e94523fcf93e8b5a0b895bfb10b778f2af8e04996845c8ee1e1d5", "666d05098b345bb5374001d7c7c2ad8c368a9116dd1baec9fea6372eed063195", "711d2b4a9c959248b6de1d806990a7ccd564345a530fb72f852688bd13b5f94e", "7e68cc88e523c58c4a815deaad7fd55963185aa1874434451f6f5f216f489e43", "97cffcaaf100ec54db380744f86a801950511370eb6f0b016daaf3135b91ca9b", "a731a3c41dd40020c149cf5fbf79157f21492d204b600431988a9164a999ff38", "ab14206412f23c7ab737cd9e0f579bd80da5ddadc677b096af8d66409df579c5", "e97caedcbf6d27a37ca4d06b4d5e232715567364c3192a782c4cd46f7df3e222", "ef05270695f68818610fd803c17c07b5b86a2151c945f96a499343c75506b27a", "f1dd3a7288d19b87bff72f3e30a0556b65f2d6c18668a54a2e2fb62adca71dfb"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Description"}, {"hashes": ["1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT", "value_name": null}, {"hashes": ["1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\DEFAULTICON", "value_name": null}, {"hashes": ["1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\SHELL\\OPEN\\COMMAND", "value_name": null}, {"hashes": ["1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\SHELL\\PRINT\\COMMAND", "value_name": null}, {"hashes": ["1312e631f80e724ea637d1b035eb3342f09a32208ab559bc85cd5820956a5755", "ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\SHELL\\PRINTTO\\COMMAND", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKCU>\\SOFTWARE\\JOSEFSSON", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKCU>\\SOFTWARE\\JOSEFSSON\\DIALUPWATCH", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKCU>\\SOFTWARE\\JOSEFSSON\\DIALUPWATCH\\RECENT FILE LIST", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKCU>\\SOFTWARE\\JOSEFSSON\\DIALUPWATCH\\SETTINGS", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\SHELL", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\SHELL\\OPEN", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\SHELL\\PRINT", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT\\SHELL\\PRINTTO", "value_name": null}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434", "cad02354c378e66ee28f1f256b75d0f535a9194e63a01964d3d11be1b791ae2f"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\DIALUPWATCH.DOCUMENT", "value_name": ""}, {"hashes": ["17395a5b140f7d5690341de536c715c0258e71236e00c46aef0913301419aa57"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KBDBE", "value_name": "Description"}, {"hashes": ["5622b336e3d79de656ea598448be37dc32d517b1f9153dcda0a7ac07aee15223"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\RADARDT", "value_name": "Description"}, {"hashes": ["12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DOT3GPCLNT", "value_name": "ImagePath"}, {"hashes": ["12c96f80fe4fb65075234dbad10058e7efbe9f07774d8ca20219f5b5fd0b7c00"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DOT3GPCLNT", "value_name": "Description"}, {"hashes": ["625bba582b51e78a3357c2a0a1a92ff5b0696389a7e3ced3a2ef1200623317d6"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FSUTIL", "value_name": "ImagePath"}, {"hashes": ["ada7a796f200aab3312a9de4bfddc09971c828750ac96845d338dbaf4987c434"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\BIDISPL", "value_name": "ImagePath"}, {"hashes": ["a409d8733c759dd2b57bb235f4bfad154c64490fbae59ab2715a9d4839840770"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\FM20ENU", "value_name": "Description"}, {"hashes": ["c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\NETDIAGFX", "value_name": "ImagePath"}, {"hashes": ["c4b182e99f6ae4f9390783f15e42af800d9a96ee20844d794ec6340da812ae0d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\NETDIAGFX", "value_name": "Description"}, {"hashes": ["da7850ed0526a08114180487901faf3fc565531313c7112a216e42dca939bebf"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\TSWORKSPACE", "value_name": "Description"}, {"hashes": ["c179aa89c19ea182ad6d23576d3e3e939f704d9c25777f2757b6e311c89cd0f7"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\MFC100ENU", "value_name": "Description"}, {"hashes": ["0132a53946f8fd63dd5709b4ecb5004ea11fc2beaec94ef5e017453c0142f905"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSHIP6", "value_name": "Description"}, {"hashes": ["1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\NLSLEXICONS000C", "value_name": "ImagePath"}, {"hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DXDIAG", "value_name": "ImagePath"}, {"hashes": ["0bb2936e529012cf02cb1f7609fa7287b49bd3a5130689aa0fbea224394e208b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\DXDIAG", "value_name": "Description"}, {"hashes": ["1ac42c93a5c7ed2032a573c91d229836148d58174b546d68fad1283466142b01"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\NLSLEXICONS000C", "value_name": "Description"}, {"hashes": ["14b8acf04483277af0342148ad78291ceb2393d22002c123a588e6b76c9c9d3d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\C_ISCII", "value_name": "Description"}]}, "reports_count": 68}, "Doc.Malware.Sagent-9765485-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": []}, {"bi": "macro-contains-random-vars", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "vba-document-open", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064"]}, {"bi": "document-contains-vba-macro", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0002", "TA0001", "T1173", "T1193"]}, {"bi": "document-network-traffic", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0011"]}, {"bi": "vba-compound-random-network-communications", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": []}, {"bi": "vba-compound-random-generic", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": []}, {"bi": "feed-domain-document-network-traffic", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": []}, {"bi": "vba-document-import-dll-function", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0005", "TA0002", "T1202", "T1129"]}, {"bi": "certutil-decode-file", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0005", "T1140"]}, {"bi": "document-app-whitelist-bypass", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0005", "TA0002", "T1218"]}, {"bi": "vba-document-uses-environ", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0007", "T1082"]}, {"bi": "network-opendns-malicious", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f"], "mitre_attack_tags": []}, {"bi": "network-dns-doc-network-traffic", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f"], "mitre_attack_tags": []}, {"bi": "document-exe-dropped", "hashes": ["0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883"], "mitre_attack_tags": ["TA0002", "T1173"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901"], "mitre_attack_tags": []}, {"bi": "malware-document-av", "hashes": ["aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-nameserver", "hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Sagent downloads and executes a binary using PowerShell from a Microsoft Word document.", "hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "iocs": {"domain": [{"hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "host": "fantasticvilla[.]xyz"}, {"hashes": ["08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "host": "e13678[.]dspb[.]akamaiedge[.]net"}], "file": [{"hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "path": "%HOMEPATH%\\N5uIJVSp.dll"}, {"hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "path": "%APPDATA%\\PC"}, {"hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "path": "%HOMEPATH%\\N5uIJVSp.doc (copy)"}, {"hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "path": "%SystemRoot%\\cer<random, matching '[A-F0-9]{3,4}'>.tmp"}], "ip": [{"hashes": ["9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f"], "ip": "13[.]32[.]202[.]80"}], "mutex": [], "registry": [{"hashes": ["069e5be54a90423032dfb6d1427e79a9b0381b4ffd062b654a7cdf9764b89bc7", "08e372f1bc0ab96dde9ffb0f62335dbe3556e40e11e1f49eec40454915b72a43", "0f7f4bf60ff258518f2a5c3b2b8c5ee416f8a434b672f78b298946f536af2ad5", "1d844ffbf1b97697df3bc2a3ad68d66cdfe697c7b73c49c5c877910846a400dc", "240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "392eb105fbbc2990e8dc4f218d15a6a969d685230404d4b1af0339e8f694ae90", "4a0b98b381bd601807bff594232ec7364d16dab8625cea24b4cf2dfeda2b1722", "4aa80e96b81fbb0fe08646924ea974214c6fe394b32070fa2c1a67c7674e7901", "6701a28e9f57760ba2816239bf9e4fe1cd0d6150b20b2e72d6eef8cdf64739db", "6d1cb4ece476b54c928e1347fd2449594bb075e16b6ba4deea1fc573a63e4d8f", "94c6b071d11e998abc16abbb0c3a8d856027a9eb410d6d70535f50ea2d7e0883", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "aa2aefaeae7bba2f4814dfec71f48f619d9f47be213826d7de276fd999be3468", "b38940afbc89af2a23ccb1c840c72f491fbb4cb955d82d43a83389660989a511", "b7f0ec3f3b6a646ef56ab82745f31acbf842f4c107eee2b806f472867d2d96b1", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69", "c6cd1a6759f8ea66bccc06824ed5d45c12d99c7b439f86151bf81c7f9c37ec15", "d5dfe06d9fcb8aaccb1f3b4613d18c52ebb50f8ab2e8b1860968223286f21b50", "e0d529d5aca4158976cbe5fa6578db3bc2dc2d962b01f0ade9626607e4b86613", "e62efa2caf7914cd07c175ea92e67a41a24d88232fd36fa3518a97b418f4561f", "eb5fb231b6e4e0afaa51fbd2d91035d0f1f6369aaf69236a6acb5d3ac63f88c4", "edd370a3535870cbd5e9b63d309cd380a57a9cf211b24dccac5ea31504674104", "fc11ee7210e628fad862303d9fb5c1bd0129583cd9bb55188b9042ffce4494ba"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\CRYPTOGRAPHY\\AUTOENROLLMENT", "value_name": null}, {"hashes": ["240d2dc4b7fe6e02afcb86581c04c97afc57ce646a63d3abcecbddf82e550aae", "9f847b64223c4f284777b6eeeba9736b774d64dfccf626f0f9c1a3f1e3dfbd0f", "c489afa673a152b4d4358d2541f8bf6256422d752f6a982aa5a9bc7c96d70b69"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INSTALLER\\USERDATA\\S-1-5-18\\PRODUCTS\\00004119110000000000000000F01FEC", "value_name": "VBAFiles"}]}, "reports_count": 23}, "Doc.Malware.Sload-9765483-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "document-contains-vbforms", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "vba-document-open", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064"]}, {"bi": "document-single-page", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "document-contains-vba-macro", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0002", "TA0001", "T1173", "T1193"]}, {"bi": "document-embedded-low-content", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "registry-powershell-ras-dll-loaded", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "network-snort-policy", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "nginx-webserver-detected", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "process-long-cmdline", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "document-launch-powershell", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "document-network-traffic", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0011"]}, {"bi": "powershell-remote-code-execution", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "word-document-heuristics-compound", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064", "T1193"]}, {"bi": "network-dns-doc-network-traffic", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "feed-domain-document-network-traffic", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "malware-document-av", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "document-launch-utility", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "cmd-exe-file-execution", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "http-response-redirect", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "process-explorer-suspicious-launch", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "process-windows-script-launched", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "TA0002", "T1064"]}, {"bi": "powershell-script-calls-download", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0011", "T1105", "T1086"]}, {"bi": "powershell-download-execute-file", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0011", "T1105", "T1086"]}, {"bi": "process-taskkill", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "files-deleted-used-vbs", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "powershell-references-remote-resources", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "TA0002", "T1086", "T1202"]}, {"bi": "document-launch-vbs", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "vba-document-opens-binary", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "vba-document-close", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0002", "TA0001", "T1064"]}, {"bi": "html-small-file-redirect", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "vba-document-uses-vbs", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "url-not-found", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "modified-executable", "hashes": ["735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "The Sload downloader launches PowerShell and gathers information about the infected system. The PowerShell may download the final payload or another downloader.", "hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "41eac8263b7ef6849f71765ccdd2a8f867a0badf68557f8c30d9993a8168b401", "438b51d4b37549f922530d394064b02fbe6687709c184a38b5a34a074b300cb0", "43e068d79329f3757e036ddcdb204aa990fe582f501601cbc7c6a21421645b0d", "46d8424f60ab40f4dd99df5904833707ee9b162550c021d3a23ddf72f1f4f225", "47864700058513d493ef53ec8394cd1b8293099f408712b4f8955c52895cab04", "4b31b4c5fec40b80436866a1d698810558b49daea36e71ec4b37cf92f7149230", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "60b5d3e27ec8892ba83de0a6eaaec2e3c0d5240d116bbb9d7fb53b2c57f11e9d", "622a2abf4e87f1091c8aa7adda836bf3544c50dfe3423d362da62941ca3af457", "64d855c7c4d89928c76a3bdbe305f821ab5a18bfc755414316dc488b13aabb11", "65b37ce0aee22b98fc27bc3396e80b74f45e591e9fec70883e7926233fd00014", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "724c94167fca70bd349884e50c79374b14eccbad71463cd094d2064e322ea779", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "7485a69aeb50de16fee518e762eb5ef557aa39c83914dbddf6a9840ea59bf9d7", "7710bb4494b0fad9a09d76148da479e390ce4c79c73cc0c34c376de662748edf", "79f68e28801b2c4c15e5ba5ed3dfd1b690ee26c7882f912d79dca4bfd55abbbf", "820bd98168f09c835d36461e28132ab92d8a0aaf5ab23ed38c46e12f4dc5eaa3", "8fa896f5623b5b6bc73452ef5f5fcfd19d2227ceaf6790ae86c83b78940fd88c", "9106a8029cc42f71417bb61c0a2d5f4f2241e2026a3f4050bf9f0f56f544efe7", "91699121a908954f63583fa0ebb72a45aff0575149e61d3a124945242a2d29dc", "9358d47e2e020fe6a97e735759c2f1342aef4de608f9f3cba9e67271fc570623", "97728a3e7c434759d20d83847016112f3c78f18efb1bfb7c0c727eb3ee510aac", "98007f620ddf52520ad87aadf9c980f571e033dae26be151a6a47edde99b090f", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "9afee523d214f186103a83cd139fbcec7ee0ad805c3e47a5f7c4df56d4cec3ba", "9c5f7145ed423360beecaf9c18a4e9f5e104503f09e43c059529be81ac0c6cb3", "a39588c7b244f9c5250cb0372b6cd3bed0bd00c7e98ea509d8f711279eec2674", "a5e9d761f0a2c8dcd4a34e48aba56aa96077d76cdda25b774e716f7c5d0e4c36", "a7bb54e437463dbc2a63ae7c01939f048319d4403471ad93484afac5f373680d", "a994a8fde09f9d62bec2c8b4a93bbe7f74dc0ae532f210ecdca36c562e6fbecf", "ac3a3492bbeaec89be6cedc9277d2f80b92b645c376f7465682fb997b6b150e7", "acdd52f15435285ecebdfcc84e1604476d8506938de3d8df774a799df3aaa462", "ae13c87f8ace83cf719fa002567c740657315527d0bed22d33424eeb44158d88", "b18c5d42d832777f84eec4979c601d6b92ce66122d7b4933b7afa283b1a281fe", "b30072828085dcee0afcaa31573537f6ca619eb3c5af2cebde5688d2590fa0dc", "b4d2bf120a0acb36f9427c0af7726ca856c82bf32046df9925bee02325aaa2c7", "b8a77404772ba85713630ca2681e684321518563dd9dd0ff367aa36796ee409b", "b9967f140f3f0175c7048480bc4944e1308caa518eb7d663194eb14c1cb290ac", "bc67dbde54e8cbcea4c3dbd8f71497b0fbb39e5c62a9fa2a500bb618764524cb", "bf26d2564665a3a19e8a4dc64d284e53f351225c9a282469ab6e4b5f66088c7f", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c47045d35e90580ec2a4ccf88ab5e9f748ec0ac258d9b8cdb979ad92ff250aba", "c4ad8f1547f7a255d0a2172b37345ef7c7bd0de5bd2151043459c52510a7dd2f", "c570e6b6ab966686930bb3c76fd9939ea23f6877888ae65881fb3cb692d99c88", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "c8a649f8fbcee887314462a052dc6dfb9b7b23b8f0ed44b241b41972fa450cfa", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "d0156023cde3a185352253ef93f7986c1578994e920f457013375ad5a08a22a8", "d2434f222a7f67bbcd483cc0ece936cc94cd1a94c93a5dbb8377125ad8db0312", "df6227aba7641f8cbfe9d5511b82ad924256f8b99929bb4fa13cc76d7f4ac587", "e21f292f87fc31d052487cb21b83f1f07b8c34992a9a73b5f1938f3e4a741933", "e2466ec807db278bd7a125a1038fdf022a96d227a534413e3cbc58ffbbc19f4c", "e2a4ce976d0d46af002e78b4cc5f3d768a8c0fbb7bbe77a7bb783a2323a582ad", "e8bd8d618daf63317806d535c5cb70b172e7fe924e4228ab4f4981b68d340e87", "eb00c00c76c12e1e11b4afcaa05ca32c05cc816f1060e326af8f8c23e02e06a7", "ecdb50dd5f648eb9e9d72964487dad74ba6ea4be532ac851660eb3f6f69cd8d3", "ed14e4094436670d6c75501df6105d6da4f236060ff70394c738ec283a722ed8", "edf6f2afca39db127efc04e9b07671c9072d588d55540896d1e879d4843ff957", "ee1effa436d18a38a31ad7b3678994b984ea8304a5a7a4d39edc5dda62145004", "f1c2c6b26d261269b06801e49c903278a80b912e5d3444d9c33c1782e0217fb9", "f1cf48e03c828143cc04b23e9ff96fbd425d7dde7b563a8997e49fce8f05d780", "f1db04d78ef4c5fc87b8aa2110ae21302d1d3644dfdf8a3ec40e8d6ff559faf5", "f2ad7210ff1ff2a8f744a9b3fa7ddcf5de4287f6a763a1ac7c53167ba2b93dc2", "f2b4a6bb0ab77c45ed30c9b19286b341435805890cfb5936b11a6e91308738d0", "f3f80d181d9ae5123ce7f37420db9c1c1a9b16f7f24afd70ea7667a2f905d768", "f41168aae6999f628fb9f46e885ce056e6321581470a5bf218178019d136ea80", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "f71a72fc977d8ce5f97c0f0ce9695b2edfbff6c9efe16dac517f4e778fd4329b", "f7224f2e95e1e0a0e344772099da2a137bb013380e9499361c6ac7a2a8a973b3", "f7704c6dc2426b67caf9d03700eeb1bf8049527de7b25ae4684015da08139829", "fcd8e1e44bda0f85038718584d66ea2541fac1bae09e36495a67f4d5ef35a30a", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "iocs": {"domain": [{"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "www[.]litespeedtech[.]com"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "api[.]w[.]org"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "gmpg[.]org"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "t[.]me"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "www[.]xinwenlook[.]com"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "kpisolutions[.]net"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "fgyapim[.]com"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "atomic-soft[.]com"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "auto-boot-like[.]com"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "salamatbanoo[.]ir"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "bit[.]ly"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c"], "host": "aragrp[.]com"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97"], "host": "schema[.]org"}, {"hashes": ["068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c"], "host": "e13678[.]dspb[.]akamaiedge[.]net"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97"], "host": "mysterythemes[.]com"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97"], "host": "demo[.]mysterythemes[.]com"}, {"hashes": ["c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "host": "www[.]aparat[.]com"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303"], "host": "data-vocabulary[.]org"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303"], "host": "image[.]rakuten[.]co[.]jp"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303"], "host": "www[.]shonanbbq[.]jp"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303"], "host": "thumbnail[.]image[.]rakuten[.]co[.]jp"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303"], "host": "shop[.]r10s[.]jp"}, {"hashes": ["cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b"], "host": "www[.]rtl-theme[.]com"}], "file": [{"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "path": "\\Kiloperit\\Loterios.exe"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "path": "\\Kiloperit"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "path": "\\Kiloperit\\Groters.cmd"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "path": "%ProgramData%\\Helpot.vbs"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "path": "%ProgramData%\\Kolester.vbs"}], "ip": [{"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "ip": "217[.]144[.]104[.]39"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "ip": "103[.]214[.]167[.]114"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "ip": "51[.]254[.]205[.]84"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "ip": "2[.]59[.]117[.]6"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "ip": "139[.]162[.]210[.]105"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "ip": "103[.]130[.]219[.]49"}, {"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "ip": "67[.]199[.]248[.]10/31"}, {"hashes": ["049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989"], "ip": "51[.]77[.]231[.]185"}], "mutex": [{"hashes": ["03c9fc78d2a6a7b6682111d70fd47483dbcce7b5b2b7395d9cb5e6bc53853b41", "049fafbcead9f25231523454a2e9a0f6f53c1a994574d790725b5f7fdf9ad303", "068e4de9a05da6cd60cea869b60a1b35b074d2d1209825ac8503ab0aff03e6a4", "08f1e023603c5bbded2234f3da049ee5099d6acb02bd67f316755d3b5f05d8f5", "0b74d64a1aa19b4cbf85eb94621ef62ea2a32d0b6fe7879f367e9b8de0816430", "0e36f81f0332a4b6bca8e807abb020fe654be9a3e9022aed3ea071f888e97fdf", "0f724265d9d4e4ffc4581971c97888235f8593435ff8c608e3cc53397bb5431d", "0fdfa93636214d614b2b094d8a03de06abc0364ff5a4abfcbd0d9aa4f826521e", "0ff59a32b7bb2a427995b7ada58410acd2aaf9a5a2a1b430300bb47bc678a269", "1169a93ffa8c8a5b0a59f9c40b87fb10aca1400afabc34c8319a23b94e327312", "16373f1b4582fefb527d420af700d11aabea5f8d04d4481a03253d698b5ed94f", "182cedbb86f96a286d1f96d07a4aae0657e00759e68f35ac9b676e7a176d6dbf", "1fdae763089dbe2e5e7083aa069b7cecb329d1e894cf443f11fa87b3cbe72919", "20a600f4b85f601331e413e77e01def30375b5d12e8da0e283492fbf21603244", "221aa40298b5256a2b79a0ba852c44f4f23e140461741ea73d686965e38a1361", "258b991f4469d86316d73570a60c90ab04e5a4acd04c5685f9008df04a1c07df", "26006a31ba4d51e415e005679b9ea5ea774d0e514668d0f77b53eafc60233bec", "284db9216a0a55d8a72701e87aaea55eee5ac946dad7b37448f4eeb50e178989", "2d140448346ac6b67b82091edceb992173989430b8b85fd55568a93e4092a625", "2de306c8ff840bf87140f7774c0ed7c6dcbd4ada5db466311d8b9646d121afe0", "34155568221422e29e5dc298e3e3be175f011b1e3412d32aba1676bfa3d5f995", "3a2a758659051bb3a626c13d9eab2397d140de4b637a3e950e710d53a31fb017", "3b6a9c380922f886ae04d45f888415278f0a5c7f7915f7f10f119ce042dc605c", "3e90ed6a177d0200853ef7cffd29d202309a8b2d1d2006b7e3b89aa1a28de58e", "3eca4c3c9bc710f41c2f8d947aba877de39f5c887e4b1d1d29950a729216472c", "50710334b8db5a73a058977ed840a4949be359fe0466310329b6c59363069d20", "696c93a2e316fa7eccf08dfee2cea851e6f70d57e3d2442211757969453334ca", "735ad6614606f2301f9004f8c9d5c5e33460d17c0fa91f86495263e3aa3155dd", "982d140267ff36d6713d87d6d2f1e2b57c8ab9ac98ace53101556e6f97e20153", "c265d945b841d8dbbc248b01c8b2c4cbcc5cd9e9f055572f9f7ab7559ca5c64a", "c7c4a8d85de881adc6e3b67ee3419c1f399628450e7f94a814e0a3a6740204f0", "cbb4da4873b24217d9ab8ccc5b9310b699ea4270defe7e6b37f7d12e93b85fdf", "cc960e23f67ee08dd75bd068c974705f3aa285c2b1265762fe5d48ac2221924b", "f5317dccdc5046a74f1d327d75f33fd6f1da9639d9bb536a5cb02eaf5c17cd97", "fe039332fc45694a47a928d730c463335be9121eacc436dbd8b6b49be9e9d037"], "name": "Global\\MsoShellExtRegAccess_S-1-5-21-2580483871-590521980-3826313501-500"}], "registry": []}, "reports_count": 35}, "Win.Malware.Barys-9768982-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "modified-file-in-system-dir", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-deletion", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "pe-invalid-certificate-signature", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-requested-softice", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0007", "T1497"]}, {"bi": "pe-header-timestamp-future", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "registry-activesetup-key-modified", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-software-subkey-deletion", "hashes": ["0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7"], "mitre_attack_tags": []}, {"bi": "registry-modification-reg", "hashes": ["0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "This is a trojan and downloader that allows malicious actors to upload files to a victim's computer.", "hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3", "104563dc1ca31198af119994021e04926624efeefcb9b5dea99a11dd43d4879b", "10aa6c72dda0e4c27c021326187e3c006af93c140d963431ce29371ae51067c7", "110d36946cdc5e4277ffe6bb9b175b18c8c3ee4e0870e8b50bb56c86585c0084", "11b902bce2f94b3707cfde21575dbdeaf7049eed547d0026145b0abed8327b92", "120cdafe7747520a12441084fbb2feb50a7c7f697374d25e724b239e2fcf1f28", "1320231b7ad64109a65aa7ea58cdc225810bb02de68043af537cfeeaff62f550", "14353edc8af74f69bff761676bac71c45706dc0b750543cab95ec7594d64c4b0", "14b8b83c383a7e7ff251f6dc99abc8237e3c7c7ef6a993beb2393fc0b713121b", "15b72a020932c23f9f2d815b04824dd78d4061a1007170093ff5e25c060a3007", "1745ab7cf2486b3f20e4e8a7845af8c2513ea0a10ad8f0aa97a33005d2b65501", "17824c691dc31d9253d7f85161ac5f69402c1fc0bad096e020cc50faaf9c722d", "179781f27672e247475903db361aeeca63a2c5fe279e07c77083f556329dc73e", "17d19118af7b57dfbd5b6022346fb51e1e332f0511cb61f20467ce1d3c3f6f8a", "1923ff504d13cd0c61194447b4389afa3e9ec3e98f7262adf44899755fe1ddb3", "197170da8adf5755559a48e4497186d27b6b0afe634cbc566901a5b4b5c1dc2b", "1b61d470bb21f3d3b41fb30374206b605c35be5785c6901174bdb43978138e5b", "1be2990282fff6cca780d1bf96bc97128c3ccf59697138bbc982ebb05c6fc255", "1c6c98b1404bb9a0ef863c6131a9c6792bae15e542abcec740d2d9308c594377", "1cd35b4e79cfa92149458c5e4ac04f78fe632b8b3fdf7981a22d17135b866160", "1d2b1ccf61e7d75ad9d70dbefb26b4a6e8664b9df986d3cb02bb4e48908fc71a", "1d7df895fa8e025d3173e58b6986d5296c9825f05febad43b074710ca973020d", "1da9e84201a5082d132d2fe665b33406ba3e02d5c248915731d5112ffde5a8e4", "1e74c26792bf4e0cb8a03a34da4716a1c1d7458680122ce00ed39adf2a0fa8e7", "1ea94b461af2f63ff5f8876fc4433846c06173dc28c1c6a808c954677846b359", "1ee885372787ab648880046ad858e38633a90984d02fd02c7c3d2d408124abf4", "1ef74197f53daa9db2b6c0c5def08065f869370f5131b08166198428282efe0c", "1f4aea2f4e5f60f8637acac4c0ea4a994979f236366e8030521dbdd3e7384bfd", "2016286768caf539f7239c89081bbce39825617479ec03f86adafe71ffc7261d", "203a9f2965f29834a5666ef5d8ff5237f9e46f86ce6fd372dc4899c6b3b21a75", "211e507df87b592c2f499988b9b9b81860e7452f01eaa5e472d5c2fa909f3d60", "226fbb67e768198040e75087186af544b24d074e7358f33affda00efc3695222", "23c7cc61b49316936bfd3a46b362b45db1afe71462ac307edf96ac450e2875ca", "24f29f45ea5e09b7ace6f0b80a620c5167856a0f7f13e08c98b11b15ae4ade0a", "256108e415f56a503129b366d6454fd8daabf8211f17c1fa272d05fc99e686d0", "261e03abbe16b88835af66e2f057e80da747c570dbe01b09c1382bfcffe54717", "261f402b005ad04afcf2ac773c6b19fd976dd31135ec63bdf6fad6ea4ee7ed48", "2742d0e8628de6495e64b8dd7dbc95796d4153168f95722099f54c198c6c7ae4", "2748488ef28ec11e5743a9544dfa84b67e7ca493f75ca5131613402d58d163b7", "2785288383941a14b296c2706949462f33730580ce67a907b556400da9878dfe", "27a0b6a1f414e3a1df57ee693386202082994e4afc47352784520bf55b09e5a7", "28fee1b0fb3edbdb425c444fc97b87ee3a17355dfcc0da0557e357933e16abfc", "29232f705fb2d74b935954d4897ce3a8f2228d8f80f8c8a53dd4251ce52ea317", "2c9e99f3a8ed32435a9cd2f2c8ce2f82d539a432866ee614a9b0046ae2fe5540", "2cd0ee20d5672b31861a13eb52a146d7c70d42628991d9294b5a14cfc53a86f5", "2dbbda51216339eddef218f097d47011b9b32494c44e51a9166a57c3b5ae9edf", "2ddd732527ce24f0a6bf599551457c5ad1b3fb1a254b8a63b2c1efcbb1a21b64", "2ebed4b66cd27e81f15e9ebd0ac889d7186dbd673da3e26d4cdf75f49c1d1b09", "2fa9316f782a78aa1e1c4aad2cbb18d76347df37af9c74e18493509df771e8c1", "301b40dca59b5190fe63d7e5ad9f95490197aece7a440f87780a13f370e20ff5", "31f5f8f6fa58674815ef31e3376860835d4992c5a238bf2b3515cd76cbf58d81", "3289b353301a2fa8a6223c00db7ff84042e61ead7649e345dd222fd3d6e86178", "360a5fa52bdd3b272b1ee891223c55ab053b0c6df5197e194d779a587ec20832", "36c91333749730e951d21d57ffa39b1fd25695a08371e59173623b6946069a16", "36d59af18210e2444547209b53f5709876baf605e0a36291f03bc6f97e5a7a0d", "3b68c4e0b305c4bb9f18d14e2083f1882f330f6f777ab18843dde98b8904fca1", "3c1d52bb1a0456e44221a9888a9eb4d805034284fe254e430c751e724114f7e5", "3d05597502b43c587eebb8bdadeb1bf9aac9be92636f345efcd575a1a155e953", "3d37eedc804b2ae1a67b3d3fec29bbc7149de5fa846e4e9d9bbe67a42098224b", "3dc44bb1247c251ab6654870bb0f8e2daa925b49c21dcd615ec37284a8151fea", "3ebc569b6061243787404839a051e065744ab10faf81fe03a51b7ccdaafd3a76", "4027837755414e5fc8eeae8de63936f1018c6ef41f830b1ba34c70e43123fdfe", "41460d86d4651c08420893715a6323be5c2c93a00a46183edba2622e6c0d8e34", "41f44c3faeaf4e9a2cab405e41b2b1593fe5d321861519b46b4e282cafbd548d", "437ec7127bd46a2db95033ff856da6d5311105053fb27f768eaa4fb36ea33af3", "43e42bcb9de45e8d4f7b21a1494d0b8b7f6d5b739777c97079c55294b59d8ba4", "4497ee4cf860e8da2795e7b451ff40f10c574e3a58d7aa24cdf42635e69963bd", "459045a4cd9fbecac6fce58e757cf37fb022de7c8fcb7d002a91bfca20d28091", "464a1f6dab93367ffd4104027c442722c10b56c7679d680824bf373c6f8b0388", "4665ff8b5f61f61d259b0808ba8a7f2debbe26230d2d9b834d1f6176b0c6dcd4", "468549f2d9d0d9e257b118724ea2f758d8bb2f31e67ad86b8be8c766a0bb52dc", "472bd0d86e4bf0634f3b23328c227476561e7181789e7b467a15628e75c27ff4", "48a6c8a6e6ee60b2b4951710825b0dc1088267a141df582c98bf824c435565ce", "499d6969872ee8626a12f1eba0084635d64c698dcc84d2865d2cf60774e960ac", "49f716fc950a502cf1a94afa28205fb388513763e3212ffee277f1a2d508be30", "4af61e9ffe089bbee43dcb711f16efe7d7445b7a904715501afee0565491163e", "4ced9273736bda17dcc9364d84c79c8569af20979bf6f77b540d8281fce76cc5", "4db011e44f0b0ba145540af499e4da0a2f630b7d0c27d8adac51398435cbd529", "4e48a7182e9393f67a3b7829e78e26b9c3929e5d5fc8c0714d29e3f15b196788", "4eb5136024a98780e1ed627e375536510d6b837c8f96c424a1550e4b7aec9428", "4f3c9d77a236ba96b44bf406d972a1577b886fb3ce25b2503e364d789373da67", "503115c74900b6ffb2423a08b205e2bdd9cb1e5baae71e56d178aa517def5536", "5077072d8dcadab17ad6f47c443781b39f5ceca1b99ebfae07abc6209b9a5502", "50d5a8bc8c55b11c907a8657ca22a3edb48caff41ee92270254fe004008504a5", "5223c983e5f0cd524dffc7f21a191c6723166ec9eaa1e95d62c5184c1ff876c5", "53e36e24544f4afbfce2a02fc10bac7d7e87af8cd9fbb01ff03352ee6b9b8ffa", "53fa4b1aaf55e6e3fdf14ee00e5673d0ce705db265db2d3d3624cf427681ff0c", "54255b34f1c54d212da3b0599142516dacc2285d2ee6b5d69fa38bdb75fe9337", "54af6e1dee5ea0c519d8befca499cdee5de4d08e254e7305ae02794527454416", "5518a3065da6995ed2413d809044c4ac17f184bb866c03da72c61a4c6305cda6", "566199a972eaeb38ef90e517b2d4d141612e8a1bccab2f81fc98931f5ef032d7", "56e89333a3e7ce1b95e733c7bee17d0dcdebd5a74f3d9e10ebbe01b80008a61b", "57851e7603ddcdf0a95e640e7c990a1238bf5061c415d91af00254ade5edf067", "588c42ce376542707e3bfa5974638ed47360d5b10568f362d417505ab2a8f898", "5c08670a605d4c9c6310085b7be8e376f19a28cfc074b776c2d3c8b7afdf307e", "5d850f0bcc883588f45c23c4b92d4de408d1fc3431b3efee47130eada4d338a4", "5e9f311753b76c8fa5c96ffd29776348206fd92dbe35664b6a64aade9865bed0", "5fee076172d887fa3983121a4ba385715997e86a9ed3c2de72a434c4f3a49b18", "6320fd5a371d5ee5eaf04d2f2a0e80c2e0b77b3e51e14c55c2a2a0562ab3fb42", "657dfa7b3dd183c5f6c547916798ea08a4ee52b181c06e72728a1fde5a7e993c", "65ed99ec8887b9915e08c2a0979eb776165f7f0851de661bf1f43fb485b75056", "65f32777bd45274143c4f151f5eddb6b49210be03d8d19d258de2b8e1b187c89", "668e9152376c1d145abfedae2d18cba265cf9fd1cfd3f6e4aeaeebb5d60bd496", "69f9008e422443cd9ca3562148b86d2e472c72664b5db3de74185162cd72f6ba", "6b0229edab885b0734a2961efb0f719d0824bc0261e64deb7233f070ec8f4870", "6b12cae6aede93c2881704485ad1a7c8895a0c7684d4471bdc062b85962fc585", "6b4b95c9ee6767024d26c9bf8ee450892ee2bba67831737fb1acc5959a357d0e", "6bf5cb347d3fd7dc7dd17813990dbc30cb9f39878e927d2f3adcf15f5a2b8e54", "6e1a586947469dcf8a926028e2c59c53ee634e3aca5a5af8fbfcbe76b92e9a76", "7118444a27779ccc794062708c7885c721b7a260973a12296202e5602617a6c3", "726f315f903ec166f2fd6c4bafe70ea111a390acc210e4dad9f672d671482e02", "74c3199cee8c945eb09b1be25f8c83877fdc9d160a57e77a17510ae6194b8b35", "74e366015273585c3a1a1468f100ce342d3f37933c5670321aab770b3241c7fd", "75a2b74825475ac6f764d8fd58ecf0eb0ac5dc0d55f83db9673d65cac4ae99ec", "7632c464118639a14be2deabfb449a9d6146efd217a457b89bb9dc99576ef66f", "76f1e80d2ff3120dcd03b175ccdc465a40ee1dbac45e15ae5106da15a9f5eaf5", "786880bb84613480a4d533a19e05fb2e280b54848e713bbcc05413a391ee7f8e", "78c83fced87d24c6282562625965deb6768a5230ed9a963a5d8f804bbf6abeb4", "79d98c9214e405bc866fc276fe7adf31120bb966132f13cf9d01a2d9c732f55f", "7af0733cebea7e0cafb328ae1eac678f7bc3774abbfd879d5cd4729c837a9fa8", "7d627a757793a780353723478fcec8c3acaa887cbc5f3c9e298e41e1d47862ec", "7ddef74c478c42234a4e721b9624e80cc74b50f21d909679f4549380d9281bd4", "7e8347b0533f008264ef5cdef2841721d290de057e82ec2dd67979165ed72a98", "7fedd74579dca5051b799442cce20ab8b32f54317fcafcde2ad3ee04ae936aef", "80bca55351da432ac037eb54931a7ec9ff18edd4bb03b8f1650fe69eef9f2abc", "81113357ef8d56cc46cd689c94321e35cc593bd2d11a63d73739286210635e5a", "8233f24f7bcc6ceff8bd3db5d1f7204802ce21d30f819203387f5c36cf491a28", "83624e1747ea7953652e363fbc44a5a2b8629fac15e56382d770f1d602600f8b", "84ade5cb8e1f19c6aa0dbd648c0f42c110422250cbfbeb593afd843febf4c2ae", "84bb314ab2b6820ed38a01507a9788f9e8afe4ead2b0003bf8f5389dfad5db97", "84d6858171ffa785e0a481e9622ad48c1965e28f22d4357a425ec270099e5140", "866182863dc954af841615c4aa2552dff12a71d99039b8716a676626d14317a4", "8916d3f716314fa9687b0de5a09c819f936efbbda834ac03f916d2de5456a147", "8a18bcc16078d156cbc00b57b931e6dc16dfe8c73ec935a6f50868ff37543c23", "8aa33d9da74c2775f0cc9c9a9c2fa6846dfcd1768bcc1ddf24ea14d4a40011a4", "8b66870bce3ec3e4cc68b5ceaf595a16342caeff643a962cf7e3566a2db1056b", "8bfa6778917ed62a0d832e95d7c5328146288e5440b3dd6a6d13eec121a3f467", "8d346d2502d857d5648e1e3fdc4295338373d28d0adf357839ad5b825c4de7da", "8db114d7a7fae4e23389e094b1bb3b708f13d19933101d6b878953ceda1dfc45", "8e0d5f630cd4062f28f0cc4cb8dbc95eef2d7102834289e33bf22fcd0814f99a", "8e7b6d1fe9d7f3edae05e5c3fda29e11181f60f4b09a4e4a53c2f9024c1a703e", "8e8e03b1caf518368b499a584a3aa06d949cc9c252897f65d312c6c894b82ff5", "8eb006da75823d7443a24f4ce449a76be5184b76176869a6232cde2b822d71e4", "8f57fba7424b340764f2a4ea28bda04c15da823504e1249e8c24a3116bcf7bc9", "8fcd0a29081608058291c5474c1ae59e56756c23a620e0e7e1fe516cd49c2788", "9001a586fd408f02bcac6c914955ea4d0f0d741cebc500a79edea610dbbc17bf", "9171807e45ed267d487a13deac6f05ced8d88f7cbe553c7dd4d1ea7adf6ca28e", "92eda7ba85bddd290093d0adf7fa31c5233d3d641f5cd7f1272091fbe8584715", "93ba29312366f59098d708da029ed3bd2ff647a6219f99273cd4748631774793", "940e13caeeabfd01a453c720fa2d4f7d113a893b1f44445cef93d6a7acce8263", "97525a717e7d37d3205e24cbfd5ebb20266b73ce3e2595b1a0cbaacefa979500", "97672b80de5580e4d6467c27e461ef60f2ccf5c86da4b712be592f114c4efebd", "97d8ac40d197dd9f59b3062072d003c3a9d910acd68aca1428f562cabc19116d", "97e08caec76295a1a0325d84a0f2a87abe73c4736d19fc37d6971982f1a4cb5e", "98528a5a5fab5dc6dada62be063bbaba094d53403d2b99092d7611df5f9baa08", "9b01d8dfa65ae501c5a47e0b63b24d9559b2f1de911d9f736abd80347ea940a7", "9cc8b5d952eaf41437b888722c06d18eb247b7c2cd8ad0968ca3b3f758e73b31", "9dac528123be4594b628e8249d0f6995f6ef0175e4d35fb60e8fbe6327dbfc42", "9e8bdb5031b2da045c9965100ef1f3a86a83151ba5573e07dd86c6b7014e1696", "9ebdf7a3e185cc21d8e8ccf5dd6d23424a7d8d6bdd76c1f242241da72b2be6c5", "9f4f3cdc3010dc6772188c05ba199614e96656961910f34db81643591fd63534", "9f9397507b2f995d9ee331c53dbec40a1c92541f8d1631f6badd5b37e168b75a", "a04283d463e1b37c77fb34c5df6073dae12b0121cdeeb7269d68e7f6f2a018a0", "a1b88b9fbd6383bd554abecae210a5344c2940e7e58edf6131325a65673511cf", "a239a8609da96ebff9e6066a54d5a6dee8e334ebfbf91377374f596089ab01a2", "a2b8aa70434501bb4edbeeb8140c5e620faf7089ea5b47525708567db6cfc593", "a6522fbc6b020d1a204f1e828787a9b7f7f214e7a5a24b5e028bec2bf84cf0c8", "a69e6c4b60f9c4d6893ac7cd83f7226c999d4c4ec3c867334181e63aa2b1f41a", "a894adb8333d6c8826fca1b120fa2595d22651302c67db7d2b4b7a89ce52830e", "a905abab3f0c775830a82c924592d464e72b4da39c06bf7fe7bcf8604d5554bc", "a9b6e5e6223ccae6bd978850d5615a119356028bce49d0c64c2fcc98efb86610", "aa3a7df5fd86d745128fd8cbd95d9054918dc974cc8ad91b7a494ac4fe3813df", "aa3b6070f0e0c90d9f6f9421fbebe8959873f1bb4e6e238d9f417cd206821837", "aa60746da99c92cc63f9c147097f8f88e03deda25b902e18cb5f7e7bfaf98096", "ab1df6958b84c3bbf9942ba2d5c57096a007caf6ea05c9bf98b00f3f73b42752", "ab7d1b74f8ad615cb880e3e7ea567802195554ece9d20be0bd1613d4b91c623d", "abfc261724c576b4460c1ac66f25b436ece2bc558069e1e47c6f0893891c5c8b", "ad5faae61fccb03ba5c6e176df8c22489b6a56dd5d2e5a94288dd91463693d41", "ae4c3a70324b3300bb67e7663319e61b0651638babcf9bcdcc47b6c6e2a2a506", "aecf0ca458fa488e6273c8c8333a12f3b3acb33bf624daaefaf040c56dab8f78", "aed49fc2660074f9b2cf5753cc5eb09e08b5b4c6a6d57b5658c0841349a5cfd3", "af0050471df1b53a14a9a09ea41ff28867b11690ef337ab2b58c8eff182cf28d", "af0b1e9287b284a23f85929a904fe440fd45e30284505d51f5f5c7ee2263a3ae", "af6245bfa83dd1ba0b1fc42a08c906afc2bdfae6297bf9c19b4ecf48ffef93f9", "af9b67bee19e7c0f37489940d4a99cb4886867b5bf7c6e282ace3e5d126017ca", "b0ae0dfaac25ca14ede681426bd1caa08c5d5c447699c0b739cefa238a78f5f0", "b0c08113077bf80e4b86c87e21dae1383bac86379e77ad21706550fcce02de3d", "b29d42cdc4fd37f6083507ca7f8b882be53f72a7095a820a72b7568c96d3013b", "b35c3d1a47401694b2023e45c43e3276d53da6d9bc6d5ced5ae25083811b8941", "b367300ca9f392ecb920f6760758e4444c45898633ab10b65d8a8660334299d9", "b39d619efec8dcb325a5f417e069e25c62d5ce17ec37dc0ebe6322eca15c46b6", "b3eb189279f3337a9ab08c235c4c3dcff71fd46e99023b4589fc09458c292a71", "b5de4b22295d02c6f2addd6617d43c31cd99792f5ff2f7d7c7df496873156cf6", "b6d0a1c138dbc73fde3fc15a496c4b109e40c50c0ed452f7c6731116634d858e", "b7c3a4ef1fe5d42aa53ae230cbd61f3f362556e2102ec5f6d3939520102789cc", "b90cd98209df4b6b46c7afe8122dbee12686778b26ab138f663b0b4c7583db69", "b94bb886b3f767918c2acc6857aff9a06ea8686ce59b8fdae96914122370c459", "baa58e31a86d23c37b78a5f62ef8abf779b2c5b630b515f940b1d45095e82a5d", "baf12462c92bdee619b23868940d6f5ab35b6f394184d0fe38c0dedb61c4e44c", "bb706a8b8d2e834250c1b9cedb72db4394c5daf24dd0bccb6b033dd0a16be652", "bba4b948bc8550a61a97ab0be37468fa6b5a336552a108a5eb9795167a0e90ba", "c025f20413eea9b6fdb335f06e290fe981eb21dfa04c23c400083fe884f469fe", "c2b9752a8ea2c4a36a3d8a11042c39dc1d6bcd372d22364380cfe94ca38de98f", "c3d72df5aab44f4180669a0fd01dc3412099e344326d7b8f5a99c6b13bf2e4eb", "c46008eb72e34f7a79dcad19c88f51e85ea5fe508900f636aba2a565a4788c86", "c5f366fde63c891ac739d4400c9694ad8108febf60599eaa9d22f11be988d84b", "c99bd16c0b7a2277d14fc08a430130fd9e564177d2aed5e863e2e93c0316b63f", "cacc0a858c2abb7df2ae580ff14c60e8f25ad1829fdb788b528773473841e2dc", "cb8feda86748f6f41f39a295146bde009b2ffaa02426c1faa7cac83abdcd216b", "cbb19249002207acf0f212566fec96b806ca9600bc27eb688b75fb1331131cf4", "cee5d3314867595dd758dca6519f418b8b62f2e4ffdf8733a2e704d74e8403fe", "cf929ec2f5c69a0fc496a88e08c6a168e32394d836f6b6892710e63a98f6d2c1", "d0186fe0bf60f7dd3be2fb7b0c77f6bb0c707b680cb03745e8e25cb0b9642828", "d04456efe9ec018939ded81f936aae84a34d0205405574601cb6dbe813f64bef", "d1eb77d0169d32af21bc9b29f5d6bf80e528a837f5357a2e2edc6c10edc7639d", "d2f601d890ff83cad454e3d15e0d44ed2afcf537bed618182548c6434f7d26a4", "d3ba2c4b2638281acc91adf4c5ea7e58e3c887cf5bb266582f800a2fc63d3ae4", "d568535083bbdf1645794e108f8e1da1389143caee98bdbdcc06b237629f5d27", "d59cfce19ba4138b40a6431d3d8e3befdb6cd8be803646bc76e370f8f5da64a3", "d726af4e90b4d277188a02ebd4e1d34678fe2e89648b7b71e6c4348bd631cee1", "d8fbf5b4aa09905e030a461ec45900220cecdcad1554217829d54a1e0caf2a1b", "d9b76b1056e83193a0c79f039969fa4eadd2544d61fca8d4f12018eb351ad0b8", "d9f0dacae48be3b66d661fe01f99ee4ba5cbbf5800a811c6ffbe384c3b624bc1", "db61b1b9ed9864fbfa70f3792660cbaf56e29668ae2f907a4da00fa9ffa78e92", "dc00ab6aa2a2843b2ffccd906b3557a93992d4c35d0cde7903ec6633120e3f16", "dc60631c79f0e0316834b68f4670a2c67d36faadd617013500fb0cf696149a28", "dde98a3aa167fb006ce485ea5f46a0919f9b269c3ade5c2147067c526477b692", "dffb542cd793640180e6102d078bbf966311d022cc172ec9bee887abf6c57fa2", "e08f5fba4360351c2ddbd59b3898e4eaf85fad7fc16572008f57db49860f78e3", "e0ebbedf7903ee6d9e162ae5575446062b7b8743ecf8c8bf9fc5592c3d07812b", "e164f972aa0d76826ecbf1c4d8e0b15ee6124c6a3b485c31fa423fb332e59f4c", "e29d745fe89431e5addce1662c6429a71e203bd981cfce2a01f47e7dfda00ec1", "e29e3e43521e4e6c7ffe53c68760845f24a6f5fc7c54292d15fe87d5cc0f950b", "e2a1dd6f86dfcf5e93fb6e83a963270f386457309f2c91d895d9f23ffbed6340", "e2da3569b4d4c96b88bd695b8550c06e421a612b1cf340478781586e8bf2b26e", "e31cb7b0bcf3f224ebad5caa13e1c1472b02f115590e61d24619166c7999f928", "e47af822c93246629e667fb6113e26ad1397ecfb456dffe98b2f76a7bee3be15", "e71d199f313d97a78318ad3cd556df14379332aaa42d82063ebe987346f900eb", "ea081e11c930bbcd944c623c32a4be8b2501ec8b21a7d6c435fdb8f4ba478bae", "ea3cd6b11f52f9bf21eb934ef9db97d37fb19f972c45c13a294a0b70802fab9d", "ea61926b264058255233b9cd9937a0664da45aa830b910a3aa8a521fd1328b77", "ec4e6a71da818026a7c6130efb5f43591d709134371829b6c790a8d603fbd9e7", "ec5b70737164763fb2c32b42ae8cba8f0c6766737ef171fee25acb358cb4688a", "ec6d086b4a6742bd7d9aced7cae163456b54641a931e73906f3493451abb9aa4", "ed0021b260d216b92e1705101fd34659a8999a252c677c9d4de70d6d3eac4ed7", "ef340fe0831e4399886566107518a491ae787a5b26724e0135209602e841072e", "ef9fb3ffe0f56c5368bfac2228bebc16d4803d2fb4a17a5ba1ebf91250d3178f", "f066f1961e2bd78886a3d9a6ebf59b055953a7ad8ad510d4bcc9368508f10dd7", "f19095a10ded7e55a1072081faeb966f8d8bbfcfd0ef20f1cd2badb4c286ba8a", "f2a15db4912f500ee94b5581eaed395240a172408ef2f467a069ec3ad6302221", "f2dd6148932d14fd3fa9dd8d12b863e58db90c44126184f1d6f16dc5cbdc7d23", "f37c51ddb58a4095997a2cadf3342340759964c846374bfd55bcae257281b223", "f4c2bce6264146982a15b72163627b2c343918265678db9f8a40fb745f615858", "f551005cb2689de9a4b190b2b3a3242a3babce23ced8401d7cede8d9e3617ca6", "f56d65109dcffd38027d718be75e946f7d32c30e8a347923a3a23594726de510", "f58e248f513536c4770cc9ff346d6eb7e3269a1ce108eee60407aaf3acb2c0d7", "f5a59056269b4194d3d33e7e9ebfd719b3312a02c9eaa480274d7c1a07a28289", "f5b91c088860515ea2a3e8c1fab7daa9e0472ede1f9081b7dd79e6f844f15a3a", "f68b962fca2d4e55e37e1769d72fdc4d7e399c714634c23d2b03b645cb28644f", "f6951ecac48015b3594de8575de575efd99be15060444dacfb13a4393f91317e", "f70653b1b6a345d4acc850e6a6c308d1175d18708223e3a0c9d4963bc5f59f39", "f83acc5af8bd87687e5d2a0f54cf99b8e228bfd7bbb57592c39ff2943092fc43", "f8d75e5dd1aae805ef5aa498faed772a5593a556f886492021c29a6a4d21e2db", "fa157bc16ff4a9c4dc7b99d0ed60b548610b1aed4cca2d47f19cc98b27c20af3", "fa44358c3559e0d5cd6c6f041a0de8ebda96c987cbe7b0183ec47032194316fc", "fab792f0e736226a7e0356097b136247b9063ec27a8698fe14aa8c68ed662ffe", "fbde800c939d3e2cdacf992e0dff81835495c955647ff5781bfbcf9a26d8f52a", "fc6467f658a85cf0d2000d19504fa89387673d053d901f54779450ee77db9113", "fccb98d04258f58c7651aa00d1f1f561f210efad767967f7e146ba1a339e5b50", "fe2c86cb132fda785d5b6ca9cbd124b512fbf9be5b0062d5d97fdea1e18c140a"], "iocs": {"domain": [{"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "host": "dontkillme"}, {"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "host": "gameover"}, {"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "host": "www[.]spod[.]co[.]kr"}, {"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "host": "list[.]bestxss[.]com"}], "file": [{"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "path": "%SystemRoot%\\SysWOW64\\vcapi.exe"}, {"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "path": "%System32%\\vcapi.exe"}], "ip": [{"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "ip": "174[.]139[.]60[.]11"}], "mutex": [], "registry": [{"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "key": "<HKLM>\\Software\\Wow6432Node\\Microsoft\\Active Setup\\Installed Components\\{<random GUID>}", "value_name": null}, {"hashes": ["00256bcc35c0c7004acc53e0a4ad53c98125eecfebb4617037a510e316053e3f", "00e9342088466c4f297ceff0c29a6d93e1042cebbb020086737e2c23fb5fd8f7", "0149f85b76b7047e7dacc9e6fbaab15124efc4346cfcf2f2b97b89a459d034e5", "01d1a5e8df4b98a9375e58085229a10285539fad6c673411fa2a50829cb3b1eb", "0327103ffba061460ff64e12e78bb4a7332130d26f42be26c330a76faf542747", "042bdbe65551e201336abec0466991c0d354ffe2fbd7d98dba40fe96ea24114e", "04df17c026f6c5939abd3a0d30f5b30b40c3f7ebaf0a30a71ae4f51fea87732c", "062dc39345c17ef320ee5be6be9815835e7b9cf6cd0f8d8ec17e56c111d61cb6", "06655581bb6aa3947a64692df24726ee0288477f477fac1a92dde198102e76dd", "069f1708d0e4dd2a26adb648aa167e4e9c297f881db0ffc40e72c10096086980", "0741c31bbd51e0e572eb3860bfbf433d2812de47eccb6fc23ed1747a6e7fdc15", "07da54d55de29f61552b03303774a823c8eccbdf8e2db0ec7eb2a49417b7c204", "07ea49b04d837e13a3d26581811aad04ffd70bca7a2700f7ccac13744939996c", "0872749a8c13f73c059289f38b6b429923b89fed5bde71fa3826eb4f49f89971", "0944098a6dca28f17dca8ff987ab25c0dce278f73c6649b733c88c3d616fdb19", "0988e9a5f85fc29f9b2d1d4b04934aef275938e42fe108d9101f2f8d83bfa2ac", "09a64cfb87d5c1b5991222d51a38a7fd589e3ac12c1bce911a34b53b36ead441", "0a51fc1d6e30f7a7c1d86632827d639f4348afcf88946dd5335cf8c6794e4079", "0a7cca59895edd7c5807d22434ae2093e21a6149df8a15fc7e0b57da73e4098c", "0bd735feb076df39e99b517cb6e5ea653154595c5c48da48cbc3a262bde4fc72", "0cb182a2d5baf6e61553065b09e6541175dfba1eac79d1d5bc1138c6ef0944ed", "0d1e719eced86f9108291825f08b61c0cebd5b6d0aa1eef27b7119e774f09fc2", "0dc9b496cc873294a34fd8f45298f5041269c64501ec95304d5b39cdc50c8994", "0e6b00afa8b69c1a552a296ec76306cb1a0b564fe56743130d266a89e0e5f1f5", "0fb7c9ec256d507416ea191a810c33c3b15f15de668eded789f5bc0f8e4b74b3"], "key": "<HKLM>\\Software\\Wow6432Node\\Microsoft\\Active Setup\\Installed Components\\{<random GUID>}", "value_name": "stubpath"}]}, "reports_count": 25}, "Win.Packed.Dridex-9768984-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-execute-writable", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "pe-tls-callback", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-compound-cta-activity", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "pe-header-timestamp-prior", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "pe-section-blank-name", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-null", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}, {"bi": "sample-modified-deleted", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "malware-dridex-detected", "hashes": ["19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "mitre_attack_tags": []}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Dridex is a well-known banking trojan that aims to steal credentials and other sensitive information from an infected machine.", "hashes": ["0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082"], "iocs": {"domain": [{"hashes": ["0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082"], "host": "pastebin[.]com"}], "file": [{"hashes": ["0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082"], "path": "%APPDATA%\\Microsoft\\Windows\\Cookies\\0BEYG0U4.txt"}, {"hashes": ["0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082"], "path": "<malware cwd>\\old_<malware exe name> (copy)"}], "ip": [{"hashes": ["1e9e5670350ff1247abec11c5423560d76968835532f937f013ec3e8f3191118", "7ebc6bbcf3548edd66877016e026a86172dc29f8997d30078db654eb81616173", "98bc09e3271cbaba27d4529572634a4ec88d4c8ba3b57358c020acdfbd281bd0", "a317f44df1fa34a55ac8c3bbedbd320ea77f1f5842fe846fb4dfb534abc166eb", "e0fc31c1db2e72724bbe333ca51f64579a01eb7aa00705893dd4ddbeb4b484d6", "e455b50913f96ac065f314f809fb1e177972c511aecc29c977f0efab9534090a", "e75008ed9fc10b497dbbd97e74301e096e5cabf41728af149690ea66780a9082"], "ip": "104[.]23[.]99[.]190"}, {"hashes": ["0cd54448b74c09b92d0e7fb8df357735d4799b954a6b31418d188c538ad5bebb", "19922bc41beeda207b892f07c9e8310b0543c08d931515a507e73640cf65412b", "32bee6c5ed8fdd2e47658e435e7bb27469e3916e4af77f8ea71aa30cb992ba44", "d52f2ea52a9af29d7a702ccee9ad4c9c235a08d47bcb834794fc83f4d949967a"], "ip": "104[.]23[.]98[.]190"}], "mutex": [], "registry": []}, "reports_count": 11}, "Win.Packed.Razy-9768972-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": []}, {"bi": "listening-port-opened", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "artifact-windows-task", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0002", "TA0003", "T1053"]}, {"bi": "registry-autorun-key-modified", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "startup-folder-lnk-file", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "pe-section-blank-name", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-injection-using-atom", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "hook-installed", "hashes": ["532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "pe-subtype-com", "hashes": ["532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "artifact-flagged-vm", "hashes": ["230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "mitre_attack_tags": ["TA0005", "T1497"]}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Razy is oftentimes a generic detection name for a Windows trojan. It collects sensitive information from the infected host and encrypt the data, and send it to a command and control (C2) server. Information collected might include screenshots. The samples modify auto-execute functionality by setting and creating a value in the registry for persistence.", "hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "iocs": {"domain": [], "file": [{"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "path": "%System32%\\Tasks\\Ryddmbivo"}, {"hashes": ["43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631"], "path": "%APPDATA%\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\euSMS"}, {"hashes": ["b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f"], "path": "%APPDATA%\\Microsoft\\Templates\\SmartArt Graphics\\wRswLnE5"}, {"hashes": ["afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad"], "path": "%APPDATA%\\Microsoft\\SystemCertificates\\My\\CRLs\\BrHHj"}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9"], "path": "%APPDATA%\\Microsoft\\SystemCertificates\\My\\CTLs\\POIunUpDiiw"}, {"hashes": ["230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd"], "path": "%APPDATA%\\Microsoft\\UProof\\K9US2"}, {"hashes": ["caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6"], "path": "%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-2580483871-590521980-3826313501-500\\2h1C"}, {"hashes": ["4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\PReu8Y"}, {"hashes": ["7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\SmartArt Graphics\\1033\\bdM4bZq"}, {"hashes": ["d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\kyqlqe3"}, {"hashes": ["3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b"], "path": "%APPDATA%\\Microsoft\\Protect\\TVr6Axdt4"}, {"hashes": ["6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896"], "path": "%APPDATA%\\Microsoft\\Document Building Blocks\\1033\\pQy"}, {"hashes": ["a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd"], "path": "%APPDATA%\\Microsoft\\SystemCertificates\\My\\CRLs\\yhNSoDV"}, {"hashes": ["532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\Managed\\Document Themes\\qt8iBbvaD9N"}, {"hashes": ["66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f"], "path": "%APPDATA%\\Microsoft\\Excel\\xNClDeKvGX"}, {"hashes": ["23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee"], "path": "%APPDATA%\\Microsoft\\Templates\\LiveContent\\User\\Word Document Building Blocks\\1033\\1zucyY69"}, {"hashes": ["3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f"], "path": "%APPDATA%\\Macromedia\\Flash Player\\macromedia.com\\ndVnWH"}, {"hashes": ["a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025"], "path": "%APPDATA%\\Microsoft\\Windows\\Network Shortcuts\\8JBThBOf"}, {"hashes": ["7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\W7vvpql"}], "ip": [], "mutex": [{"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "name": "{24d07012-9955-711c-e323-1079ebcbe1f4}"}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "name": "{fa55c581-7c66-eeeb-7446-e85cdd6e7a03}"}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "name": "{1cd1f8a6-f7bb-04d1-d80f-2a4c87e86995}"}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "name": "{c52654a1-56b4-1379-a079-9399d3529237}"}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "name": "{c6f7747b-6c04-5b4b-1038-fdf3a4b114de}"}], "registry": [{"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{690D1BD7-EA98-1004-3AC9-E87553700E95}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{690D1BD7-EA98-1004-3AC9-E87553700E95}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{63FC4996-AFD5-E391-06A7-EFB6E2702561}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{63FC4996-AFD5-E391-06A7-EFB6E2702561}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{10CDDA71-B745-777B-1AF7-51696DB9BB93}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{10CDDA71-B745-777B-1AF7-51696DB9BB93}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{CFD6D5E6-02FB-7433-9261-E8E1B87CAC69}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{CFD6D5E6-02FB-7433-9261-E8E1B87CAC69}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8BAB5812-9D02-8F14-74B1-BEDE393F8C1F}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{8BAB5812-9D02-8F14-74B1-BEDE393F8C1F}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{10DF83AD-199B-9C18-3FEF-E4ECD6A42F66}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{10DF83AD-199B-9C18-3FEF-E4ECD6A42F66}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{1AD90FE5-CE2F-E8B8-CF09-E0B1912E9542}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{1AD90FE5-CE2F-E8B8-CF09-E0B1912E9542}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{05ED06D6-F422-71CC-26B3-C9964D56F645}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{05ED06D6-F422-71CC-26B3-C9964D56F645}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{98B09642-2764-54AE-3333-D8C6CA536428}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{98B09642-2764-54AE-3333-D8C6CA536428}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{63D99860-AA40-CA79-F681-9DECBEF55447}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{63D99860-AA40-CA79-F681-9DECBEF55447}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{D4B277A3-C25E-BCDE-A054-D41AAC36394B}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{D4B277A3-C25E-BCDE-A054-D41AAC36394B}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{FE9DE6BC-A4CF-8285-E73C-DFE7A08197FE}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{FE9DE6BC-A4CF-8285-E73C-DFE7A08197FE}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{B11CF2E2-C0C2-7860-F12E-428101DCB963}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{B11CF2E2-C0C2-7860-F12E-428101DCB963}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{7E6AEF51-F5A7-48A0-B175-FE26B30A3B42}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{7E6AEF51-F5A7-48A0-B175-FE26B30A3B42}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{16B7E754-9EE2-32C1-C91A-8B583435BC7E}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{16B7E754-9EE2-32C1-C91A-8B583435BC7E}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{39D7DE2A-54FC-2744-D7AC-675623A7BCA2}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{39D7DE2A-54FC-2744-D7AC-675623A7BCA2}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{99AFC7E2-3072-E83A-1466-12D27AF64E37}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{99AFC7E2-3072-E83A-1466-12D27AF64E37}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{4CC85906-69B2-9C62-6F32-DB59BB20E148}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{4CC85906-69B2-9C62-6F32-DB59BB20E148}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{7341EBF5-13B3-B0E7-BF66-2D9694A90A50}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{7341EBF5-13B3-B0E7-BF66-2D9694A90A50}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{C27601A5-3901-15C3-A695-2A1D7F8D0442}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{C27601A5-3901-15C3-A695-2A1D7F8D0442}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{D4A2CE99-7BEE-810D-0423-B648B33F6A84}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{D4A2CE99-7BEE-810D-0423-B648B33F6A84}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{3652DF27-28EE-5909-D9B8-37EBAC87B419}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{3652DF27-28EE-5909-D9B8-37EBAC87B419}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BB2DE99C-DB07-DC10-EFBE-A564644D3A62}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{BB2DE99C-DB07-DC10-EFBE-A564644D3A62}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{EE3FE169-83DF-36EC-A156-396F6DF98E47}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{EE3FE169-83DF-36EC-A156-396F6DF98E47}\\SHELLFOLDER", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{4B8ECE04-1789-3AEC-6B60-F24438FD3F99}", "value_name": null}, {"hashes": ["01ff8188c74308b5694f1f5417b8dc8a2c5ac2fe59b4b10d792273dfd00c40d9", "230d68f04b62e617e40c56976ab583c7eeaa20761a36424ff587f62411770bbd", "23c5bbe598a60c2814cd72779bc50626d16455ec1197c73f33bfcb8b9bd95bee", "3a5d69c3a2b52ad6d2eb5c1471ca4e93fbb17cae1bc33972a67c2aedda09581f", "3d91e0a34af694a2c0dcecbf51e9aea69df32acfafa28e778f8136585c188a9b", "43edfba88ac4ef39ede058afdd0640c659e3cf939a920c7f45449bf514ecd9cf", "4dcf29b7d5c46b1647550492fea89934c0279562875c1c1f5d2a32eadddfef2f", "532c4a9fdcc00ccbbde0658accc2d5d76862011038a28136e5c19f312e1cd7a9", "6354ac921d32035dcdf9ade95aa7025c517d47e93b1d636b415944ff4de87896", "66b88b6a6bbc1178cd69d4730d4e946ac78fd7b7941a7752c269e5526475a48f", "7027504d9be13bd47b45742a2035263c69ca96596e19db73d27e0b91bb48086a", "7151719b7ecf17a0193a2ae504598f5c2fb64db5ad68812c2a11cf59f392edc2", "a5fcac8fa76442c46d1e48e4104a67399e68a03829e3c60aab67c38d152d9025", "a969bed6f7448696349028d766d421094510c7759828473a4a3dd8baf7fa37dd", "afd7750169a65f560917f45bdad20b3785d3b8ea3bb4e4335d6a978ceec931ad", "b85dc997c286d5e1c94c544310837a28f8b7376d5ff40fbf0af80af9cc43cc8f", "b8c5142d09851bb8da18953b38041345f177a1ea49f2101da423f3d148a26631", "caa4ce651ab88ad9a49b05e59df3065f8488b9051b3195849775dc29e83957b6", "d96e5c17c53670a8bf021f3fcf93f4ec0fc66525bfbe3142f4a6397979534edb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\CLSID\\{4B8ECE04-1789-3AEC-6B60-F24438FD3F99}\\SHELLFOLDER", "value_name": null}]}, "reports_count": 19}, "Win.Trojan.Bifrost-9768974-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "pe-imports-empty", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": []}, {"bi": "process-hollowing-detected", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "modified-file-in-user-dir", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": []}, {"bi": "malware-bifrost-default-mutex-detected", "hashes": ["b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-packed-upx", "hashes": ["90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-dos-header-paragraphs", "hashes": ["baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-dos-header-initialsp", "hashes": ["baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-dos-header-initialip", "hashes": ["baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-pe-no-dos", "hashes": ["baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd"], "mitre_attack_tags": []}, {"bi": "pe-header-numofsymbols", "hashes": ["baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd"], "mitre_attack_tags": ["TA0005", "T1027"]}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Bifrost is a backdoor with more than 10 variants. Bifrost uses the typical server, server builder, and client backdoor program configuration to allow a remote attacker to execute arbitrary code on the compromised machine. Bifrost contains standard RAT features including a file manager, screen capture utility, keylogging, video recording, microphone and camera monitoring, and a process manager. Bifrost uses a mutex that may be named \"Bif1234\" or \"Tr0gBot\" to mark its presence on the system.", "hashes": ["014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "baa88c072228039874894caf06a21a911f79153bd227b95f3f6e019576148ffd", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c", "ff1718da94c69d192919cad0fd0d3e6efdae1f8f4addcce80f8c7b513038cbad"], "iocs": {"domain": [], "file": [{"hashes": ["014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c"], "path": "%APPDATA%\\addons.dat"}, {"hashes": ["014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0"], "path": "%System32%\\Bifrost\\msnmngr.exe"}, {"hashes": ["05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c"], "path": "%System32%\\bifrost\\server.exe"}, {"hashes": ["90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d"], "path": "%ProgramFiles%\\dell\\dll.exe"}], "ip": [], "mutex": [{"hashes": ["014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "91ff6392cdd780b80bf8892d9f36e29d4d0976f378b62d21da12ed0bb03312fd", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "bad59dccb676cb40a43cf19cc11f03a1d5f984f9d665d4f7c5df1d678fecd65a", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c"], "name": "Bif1234"}, {"hashes": ["014044854d6020c9db6d48e7b8486449439a93099dc7ca6b08c77cbc37cc9b36", "01cd8de48cced53af1973a90fae7b4bc8fb6b3469123cad223cb5bb4f314deca", "05bc822e3abb0d52bb2d0a5994bac44008702cbb433cd0f47db87dc7487220a5", "067445cf9e876eeef5d2565c5ebabea9e0bd61dacd612bcc1277c705f45534e5", "0b5e5b8521844e9b57b4c051db8091a5dcf31dc20edb57d985e486675c29f528", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "71a7098854fe637c0fc269f5b03397530e5e6eeac8f364b348f9ce05aa1e7be4", "7d271a53df68f1dc6937a6fd1ca9ae6cd05261f2b411bcca019bc741118a09b2", "82f6f5a7bc2d8a5f289f042c239afc2240fc4606627542844d5af730d7c24f66", "90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d", "9a7839ebe87004be96d6ff08fa74b7a7297b1b86bc1b66b267ce440b5d23bc92", "a000f2a444b5957fc05704a0c0f2de22d5b01fd25914021eb54e56781d563a0c", "a2c4738b274ffad5fcc1e19a3cb567b755c1f699420e3c47f133598d959a8428", "b4a1a951e6f42fd8f86df4dc76ab8a59276af598be9391042fe34a8e00ebb968", "b91ae2993f51a1622d0648f3dbe3e51cfb0cf104bec1893ceee3e0d5939b6206", "c255bf3121661306c79cd642c8819374e1848252a86b28cf70027ea3100ef567", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691", "ddb48749423eee5baaa183d650136e157a323dd508196204b415d14fbb629cb0", "ed27f938818b76721be9d3d55bf146c2cb13377699c43d050ee57fa9843a8b6c"], "name": "0ok3s"}, {"hashes": ["2e06e57e1ef7f22d675e932516c1a9de98d13e0c8b2559dffdf78f07de404375", "5c13c2a1d566b0979972f89ce9aaf715e4ca6a33cb22108048f3455ed0d079de", "6e026c3936a108c7f807a084e84f8aa671ac9cfe8f6d00050fbf38b29723b572", "84af638275aa1c9324064d0c787addd462b95c74b00b02c74aef44baff801e16", "d7b43408cd35b9901d3907f1cff3b58b7c2a0c458ce0502e7af0df227c4e9691"], "name": "Global\\<random guid>"}, {"hashes": ["90563ddf40c0a5e0d403c0b210c1ff80d7dd285456d7f5d02826fc507168052d"], "name": "uygiuhy"}], "registry": []}, "reports_count": 25}, "Win.Trojan.Zbot-9769359-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "pe-unalign-hdr", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-file-in-user-dir", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-russian", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "registry-autorun-key-modified", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "potential-registry-persistence", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": []}, {"bi": "registry-service-autostart-disabled", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0003", "T1112", "T1489", "T1058"]}, {"bi": "registry-disablesuac", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0005", "TA0002", "TA0004", "T1088", "T1089"]}, {"bi": "registry-action-center-disabled", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "artifact-memory-vm-detect", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "startup-folder-modification", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "disables-security-center-notifications", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "process-override-security-center-monitoring", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "pe-header-timestamp-null", "hashes": ["24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9"], "mitre_attack_tags": []}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Zbot, also known as Zeus, is a trojan that steals information, such as banking credentials, using methods like key-logging and form-grabbing.", "hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "539c112c3fb53adc8ca39ee6f13815b4dca68b0fb10ce0937cc5fb425b62e4cc", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "5565b7be01139ff26c2a3d07c684ec66e485fd9cf825816744706cb588e18142", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "58fccdf2e008213a85eb6640d596149fc9ebe47211df2cf4c8f656de653103a6", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "5c03170bb11ed43ffea4873751a8cb1578216c56989e2ff7025c2403085f53db", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71cf83316c13369fb435e18f37e84ef84f72e165eac0557884e25a5bc53f8639", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "845d3a5b2c7e9d6ae2cbd2ea5e623862c7eb220c52b3b8693b3860298bfb8e7e", "876a6a2b1c44941473b84531b6a4bb7b71dec8ab9b6e2a1f72bc22b448605068", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "89158ac54e8bcf9ce544118ebc89ac062425acae812b258bfad0f6716ef5818d", "8da5382c836bd9124955fae4702db8858d43c33931a441f456db202c62cd6759", "8fd2c041a4ac2995b50514a84cdc0b7346163353f0e003e5cb989550940d52f4", "92c47590ab395a74414b34136f272327fddb735b1b34484b73e2cec7361ab104", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9a6bcd549682bc9a7503211779d3d1eae055e68a2955ca182f97f01a4c568cc6", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9d60b9fda9d8d938878521b9e40e9f234f9a846af0ac5382ee834bbc3a4c86ba", "9da8c1b0c841618c8b66e91509c2d2f2058309e5fa2b0d33bb768094c1edb8ee", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a1c50b1eb1afcdb9aa1c3c58f279f4d90a97a3f06233d133b39dc61e7e94c287", "a3dbc09553ea36eb5a6447779ef0f31c5cd4525d8d09d226c3cb8673b821ad88", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "ac8d36f5220d6fa86e3a47269791f32930e0b11dd6376be07ea772a43991e906", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "b77b1adbe02e8e4c2de0113b491b2f7989c25384fa24766f1ceed0c05389dca3", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e71037b65ebf8ad4141ec69686349098185a4b262dc34da2106a8134bccaec7e", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "ed21979211b3f96e37a5423d8ffa9e152970a5c5039b636767bb5f0477e92cbd", "ee0e401c8f4fe4ae98f4d0d20279809b825fcbeb82be01cdade601fb0b061bb1", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f2f6f9365c7cad48c8bbd67d0261d523a4f3b27e29f0c540353b92b0bdefbbdf", "f3ce681f3010e0d5e92a64dc4db9fb4eff1eec35b9ae6a30d7d04f50bf5bb49a", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8", "f70af28638411031da54ed3709fd33958c6ff99455d1cac64730ad7ac66bda2c", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "fb9d7ea92f962abe1d55ea2c9de518efeab5acd8324edfcc76580694167f231b", "fdbf13612f7d93c5ea3bfb4af8a0d6ede14c869810169f8f0a50fb36e484d6e4", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "iocs": {"domain": [], "file": [{"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "path": "%ProgramData%\\98BE0FA9BB7E8E3C000098BD76F2948C"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "path": "%ProgramData%\\98BE0FA9BB7E8E3C000098BD76F2948C\\98BE0FA9BB7E8E3C000098BD76F2948C.exe"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "path": "%ProgramData%\\98BE0FA9BB7E8E3C000098BD76F2948C\\98BE0FA9BB7E8E3C000098BD76F2948C.ico"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "path": "%ProgramData%\\98BE0FA9BB7E8E3C000098BD76F2948C\\98BE0FA9BB7E8E3C000098BD76F2948C"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\System Progressive Protection"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\System Progressive Protection\\System Progressive Protection.lnk"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "path": "%HOMEPATH%\\Desktop\\System Progressive Protection.lnk"}], "ip": [{"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "ip": "103[.]4[.]225[.]41"}, {"hashes": ["04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "172[.]217[.]197[.]155"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "172[.]217[.]197[.]100"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "72[.]21[.]81[.]200"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "173[.]194[.]205[.]154"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "173[.]194[.]206[.]95"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "74[.]125[.]192[.]95"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "173[.]194[.]205[.]94"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "172[.]217[.]197[.]93"}, {"hashes": ["db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db"], "ip": "8[.]253[.]45[.]249"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "209[.]85[.]144[.]154"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "13[.]107[.]42[.]14"}, {"hashes": ["58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9"], "ip": "104[.]16[.]53[.]111"}, {"hashes": ["58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9"], "ip": "104[.]18[.]71[.]113"}, {"hashes": ["58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9"], "ip": "13[.]107[.]136[.]9"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "173[.]194[.]175[.]105"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "173[.]194[.]207[.]97"}, {"hashes": ["db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db"], "ip": "8[.]249[.]241[.]254"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "173[.]194[.]207[.]155"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "173[.]194[.]205[.]101"}, {"hashes": ["5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c"], "ip": "128[.]92[.]203[.]42"}, {"hashes": ["58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9"], "ip": "13[.]107[.]136[.]13"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "169[.]47[.]141[.]204"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "99[.]84[.]105[.]15"}, {"hashes": ["e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b"], "ip": "99[.]86[.]230[.]68"}], "mutex": [{"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "name": "98BE0FA9BB7E8E3C000098BD76F2948C"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "name": "98BE0FA9BC7E8F3C000098BD76F2958C"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "name": "98BE0FA9BCBE8F7C000098BD76F295CC"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "name": "98BE0FA9BD7E903C000098BD76F2968C"}, {"hashes": ["081fbdddada8c1a86a2d35f4e9e40dc2fa354236c880c23fa3d9456f02b6e5e3", "3668ee29a2aa4d4cba05675b39a20863f1f09f95a3cd35ca8b4bd7154421fd45", "5d5d5a8546827e4deaadc442ca31e1eda25fe3790ddaa48d4f84953b4f3ba2f7", "5f5cc895faace361b7582b0404a7af6515eebe77e0a70430286e602cce4d186a", "6359eaaaea1c10b9fd4707c2dcdd008f747c594f01a106097562e3f2508c27f9", "89010475a9f1ae8e21e6ced7176b436223e82cfbf9308ec5f266b5e4b4ab06bb", "b74c610992bc7d4b0391683c0d2a493fa5f439c7f9ddb0cd76c6291a5cad1628", "c1ada11baa808ca3c281b4acea398433d9eb4f470465eef991241f8027c6f2a2", "d5bdece15ae7f01632887f7f4cc440a66e60d2a4da5c82b61e6c9108e26b7ae9", "d68d5fd5c66373ffb7bb0a1883207cc658ba1184d1bd99499a3c2a4655cb8589", "e3e7914bbf3c88d44970c77a892ccf6d085f8c236b778abed010e7909d7dc73c", "eaa6bbfd7203d85b18f693b20fa51dce123bca0a15465c563433f8a36b3caca1", "ef6db17b0c95a8023c890d0fcb0af1adcf1bfa9bf89d9702abbc29ca222ac96f", "f57e9a4faf416f8bae032aa6597f238691423e0eba5ea942b00ff837823731f8"], "name": "Global\\<random guid>"}], "registry": [{"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "AntiVirusOverride"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "AntiVirusDisableNotify"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "FirewallDisableNotify"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "FirewallOverride"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\SECURITY CENTER", "value_name": "UpdatesDisableNotify"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "EnableLUA"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSCSVC", "value_name": "Start"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINDEFEND", "value_name": "Start"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER", "value_name": "HideSCAHealth"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WUAUSERV", "value_name": "Start"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\LUAFV", "value_name": "Start"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\SYSTEMRESTORE", "value_name": "RPSessionInterval"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS DEFENDER", "value_name": "DisableAntiSpyware"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INSTALLER\\PRODUCTS\\98BE0FA9BD7E903C000098BD76F2968C", "value_name": ""}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "98BE0FA9BB7E8E3C000098BD76F2948C"}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INSTALLER", "value_name": null}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INSTALLER\\PRODUCTS", "value_name": null}, {"hashes": ["0026182491fb2b43a099f0eb348bacf4eaf0d7ae9eb99a194bf19cd0f09a084c", "01b275cb46d6f2330c474c3a95d8d8bf7a68788700be0f3f4ac0eb173130e88f", "04a0bca8e852b9427305564cfd7379f4f4ef446e02e1175e716c036737012a34", "09c4156b71f0104f91398d3d18fd5b2630c1c6e66b8afe16fd78d5abdb07bc0a", "1372a41318c69a88eb87395b6299117dacc691a36174a50d74e7d3dc92fe122a", "143a7a3ff01a2ca3621635c56d75a22a0018c1899a791b8e908d173c866ca9b1", "17fa9bfeac7472d467f58544b31d6922c54f7e91df3e884f174b1c2fff3f0bd1", "1aa0d9083a029f51c5d96b4a954dec91c626f03a5449c97c12e3048c8f42110a", "1dc5847ab25bc85751c44260917acbd93056d6909ad52e98e14904dca578955e", "1de85f812a67e5b857d5bd754966c06e281b40634d8bbbc443e6514e213cdd30", "20ebd16fd3572afced7f73cdea92155b5301836481256d3bc71d7725771e6251", "24b292803c39d5df4e30216562e4128f7d06461aa7dddd1c5b5601061c2f98c3", "25720be6833a4aa4773bf038c97c6dfae36cc621a9dd8c4369182194d4ca3de9", "2a9b26247bef9a4969b5416f37e4d9bccd2d2ca7ad38f789a20051618b297c07", "2b182c3634287cc6121ed8b84dea43092e3b6edf67a1c738328c2412a727e0d0", "351c901a32402cbdeb3591af2bc06f94fe2efb197fe7cca6f700e1e711076821", "381a82f9f24023d4d25f3413341acf2b8f5ecef1f5f707257a2bf4766db45cb7", "3a3d4c6840f85eda1242726bce33e004f0bf8c29934b1b62c12ebdda90eb256b", "3a8dedc59fc47f2c84b4a8eca2efffbba612fe7ca2d8349c0235b4c6de16b25f", "3e60cc0326ef48ddd5f39e5fd670836331d3e1c0e685bead48cbbcf1811ed026", "430cee71ba89457a3c5faae10eb6e6f60b38e605c0d40620459146f711bb1de7", "44050e4d43d1ec77dd2f64d89847ef1bb3afebbb063ffa4bffeb9004a578ae91", "463d9573dee3bc5b14d8ccde8a24cecf40ed14726fdabcf23ee88a8c7f0d3640", "4db9ce293eae6a711636b8753478695d058f7c99c9c61522d4091bdf5fafa9f8", "5064243fa7652130ded131bd5a0f73515f6967efb6b8beae5399cd63595f213a", "5176a4de586d7b6d9d2e77dd64dcf14d89264dfb1590b85f9db831829246a92c", "5422e1d504af06a3f0d2ce1c84428fd18289301fba78b1c8370483fde1302f7e", "5554f691791a761971d28503ad82d667593f4ff9d9a487acb699c5ee7467fd41", "57c7986beab12b461e3ea0610b8c3d93e9c3e90abfb97c31bb85e9ccee961d21", "58165fb54c80d06769339f4f3b9eed9071fb6fcdf175f026cd919e98a7a082f9", "585376c2677b11f28b4b00ad89423d859b5034032200ff7dae029499e3e4571e", "5a1127ed53dc4d86c7657d3201469f302ca46a8dd8281254fe6354c30a4a5ba7", "6874ebf990fbaa42ec1abd267224e9142f3d7aafca79cf4ee45c25272dd29253", "6919afdb9a15ac0331c19bc15bd7d7ee2d8af61521447c13b68309edb8cd36a0", "6d27eb38143804532ab68d5144eafcbb0ea186882ef7845565266d6828686cbd", "6de8595644358182ca2b30c1bc94ff85968cb405dd8011f4d0ae46d9c66965bd", "71df60503f7591f2e7115190befe0fdd9e34130e7ad8d6a847ed502cf489a2d2", "8026d6bdc7a77656e17ec68b63886d9a905b44c248c9f130df7cdecf0e411040", "9890253d8df722d5f2e030b10146afd77064c8a5f24441814755fd245ea0fe29", "9cbf5a0fa44934b25d48934ccf06d93b49a96dc0b6d4dde4176cc81e666764bc", "9e1c9f049eb928f4f81155c6088c91a25fcf4c8fdcb2d0559f6c014af2b357b3", "a80d92ecde9f22b9cd8f0dcda1f32f441573762f3e0ba1c428644f9e1abb97c3", "ab75072b3c59bb05fd108bde42bce675eab53813d36e194173d1f913e1ecdcd1", "b8a81905078d085772fa5a88fd8fdec30f832cbc9c38b3babf51f3ddffe6fdb6", "ba4216a90a6de32d8146a1e4bc2732126b1e9ff4b30b7870b2dcd8110ce1dbad", "bd393ee082190142b11c5516cf10e049bbacedeb12488bf1d0f95681a3575508", "c079f276097a970b04d850e4cb2bdb1aa5bbc2e921d29b00e8aebba3abfc36b8", "c32a97ce5d56da392c5313b2af0d688d24dbbc574b271e1f96de770a61054a25", "c3b4527c57e2f417a177fe4b373aa8443a0889187d508c9c9026d5af2f01977d", "c4de9561e0f724e9e14aaf681f58295f904d9e2109a58404e5b808b574c7d536", "d31730018ab1c98235858b7cedbf171e4a2bb9cedb49f106768b2088b6918662", "d9d6b786a2e3c5d1a1c8ca26e14a0f19e2dad813517011a23adbdda2c82e2dad", "db543603d2aa45dba4154a10a9bf8550ac336fd16dd839ed09c162cd0c5b00db", "e1aac0bac92e15bb17c30c92c7a8e25e05cb7004426de966dbcaa5f112ac5d37", "e6a272ba9889d12e66ce243985965e2f16affde0fbf1c26749233589940a8af0", "e973cc6c34480043ca39a85cf2df219cc343175be2f227363c7ff62eb888830b", "eed07ea9979904cfc784cb9ef6fb10eb7be3343a268beae984a61276f29cc035", "f175f7752e65546c2f1fe7c970cc03bbc7e979abdfc07da87a2327a52e46c3d1", "f99c2e2fa08ad8fcfc37accc34115a5e7c5db6769d156b3d8de993d0a833425c", "ff2a0e421ce43a24d6718183bfbef6674b4a367700880d8340209591048cbb9b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INSTALLER\\PRODUCTS\\98BE0FA9BD7E903C000098BD76F2968C", "value_name": null}]}, "reports_count": 75}, "exprev": [{"count": 9993, "description": "DealPly is adware, which claims to improve your online shopping experience. It is often bundled into other legitimate installers and is difficult to uninstall. It creates pop-up advertisements and injects advertisements on webpages. Adware has also been known to download and install malware.", "name": "Dealply adware detected"}, {"count": 9460, "description": "Process hollowing is a technique used by some programs to avoid static analysis. In typical usage, a process is started and its obfuscated or encrypted contents are unpacked into memory. The parent then manually sets up the first stages of launching a child process, but before launching it, the memory is cleared and filled in with the memory from the parent instead.", "name": "Process hollowing detected"}, {"count": 2395, "description": "An attempt to exploit CVE-2019-0708 has been detected. The vulnerability, dubbed BlueKeep, is a heap memory corruption which can be triggered by sending a specially crafted Remote Desktop Protocol (RDP) request. Since this vulnerability can be triggered without authentication and allows remote code execution, it can be used by worms to spread automatically without human interaction.", "name": "CVE-2019-0708 detected"}, {"count": 1703, "description": "A PowerShell command with a very long command line argument that may indicate an obfuscated script has been detected. PowerShell is an extensible Windows scripting language present on all versions of Windows. Malware authors use PowerShell in an attempt to evade security software or other monitoring that is not tuned to detect PowerShell based threats.", "name": "Excessively long PowerShell command detected"}, {"count": 798, "description": "Install core is an installer which bundles legitimate applications with offers for additional third-party applications that may be unwanted. The unwanted applications are often adware that display advertising in the form of popups or by injecting into browsers and adding or altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Installcore adware detected"}, {"count": 785, "description": "An attempt to bypass application whitelisting via the \"Squiblydoo\" technique has been detected. This typically involves using regsvr32.exe to execute script content hosted on an attacker controlled server.", "name": "Squiblydoo application whitelist bypass attempt detected."}, {"count": 673, "description": "Crystalbit-Apple DLL double hijack was detected. During this attack, the adversary abuses two legitimate vendor applications, such as CrystalBit and Apple, as part of a dll double hijack attack chain that starts with a fraudulent software bundle and eventually leads to a persistent miner and in some cases spyware deployment.", "name": "Crystalbit-Apple DLL double hijack detected"}, {"count": 620, "description": "A process was injected into, most likely by an existing Kovter infection. Kovter is a click fraud Trojan that can also act as an information stealer. Kovter is also file-less malware meaning the malicious DLL is stored inside Windows registry and injected directly into memory using PowerShell. It can detect and report the usage of monitoring software such as wireshark and sandboxes to its C2. It spreads through malicious advertising and spam campaigns.", "name": "Kovter injection detected"}, {"count": 429, "description": "The certutil.exe utility has been detected downloading and executing a file. Upon execution, the downloaded file behaved suspiciously. The normal usage of certutil.exe involves retrieving certificate information. Attackers can use this utility to download additional malicious payloads.", "name": "Certutil.exe is downloading a file"}, {"count": 206, "description": "Command line options indicating usage of XMRig Miner have been detected. Malware sometimes uses compromised hosts to mine for cryptocurrency on behalf of the attacker.", "name": "XMRig Miner Detected"}, {"count": 180, "description": "Gamarue is a family of malware that can download files and steal information from an infected system. Worm variants of the Gamarue family may spread by infecting USB drives or portable hard disks that have been plugged into a compromised system.", "name": "Gamarue malware detected"}, {"count": 127, "description": "A process associated with Microsoft Office, such as EXCEL.exe or WINWORD.exe, has started a Windows utility such as powershell.exe or cmd.exe. This is typical behavior of malicious documents executing additional scripts. This behavior is extremely suspicious and is associated with many malware different malware campaigns and families.", "name": "A Microsoft Office process has started a windows utility."}, {"count": 87, "description": "Maze ransomware has been detected injecting into rundll32.exe or regsvr32.exe. Maze can encrypt files on the victim and demand a ransom. It can also exfiltrate data back to the attacker prior to encryption.", "name": "Maze ransomware detected"}, {"count": 62, "description": "Trickbot is a banking Trojan which appeared in late 2016. Due to the similarities between Trickbot and Dyre, it is suspected some of the individuals responsible for Dyre are now responsible for Trickbot. Trickbot has been rapidly evolving over the months since it has appeared. However, Trickbot is still missing some of the capabilities Dyre possessed. Its current modules include DLL injection, system information gathering, and email searching.", "name": "Trickbot malware detected"}, {"count": 52, "description": "Emotet is a banking Trojan that first appeared in the summer of 2014. It uses Automatic Transfer System (ATS) to steal money from a victim's bank account. The Trojan is distributed through spam that includes a malicious attachment or a link that downloads the Trojan. Emotet uses modules, downloaded by the original Trojan to grab Microsoft Outlook information, modify HTTP/HTTPS traffic and distribute spam. Once executed, it checks for virtual machine processes and injects code into the \"Explorer.exe\" process. Then it reaches out to its command network to download its modules, each of which can be run without the original loader.", "name": "Emotet malware detected"}, {"count": 17, "description": "A process injection was detected that is most likely caused by an existing Qakbot infection. Qakbot is a worm that spreads through network shares and removable drives. It downloads additional files, steals information, and opens a back door on the compromised computer. The worm also contains rootkit functionality to allow it to hide its presence on a system.", "name": "Qakbot injection detected"}, {"count": 14, "description": "Bluestacks adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Bluestacks adware detected"}], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2020-10-02T14:50:50+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Doc.Malware.Emotet-9766089-0", "Doc.Malware.Sload-9765483-0", "Doc.Malware.Sagent-9765485-0", "Doc.Dropper.Valyria-9768469-0", "Win.Malware.Barys-9768982-0", "Win.Packed.Razy-9768972-0", "Win.Trojan.Bifrost-9768974-0", "Win.Trojan.Zbot-9769359-0", "Win.Packed.Dridex-9768984-0"]}