{"Doc.Downloader.Emotet-9781906-1": {"bis": [{"bi": "document-contains-vbforms", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "document-single-page", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "wmi-process-create", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0005", "TA0002", "T1218", "T1047"]}, {"bi": "powershell-encoded-buffer", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0005", "TA0002", "T1086", "T1202"]}, {"bi": "registry-powershell-ras-dll-loaded", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "process-long-cmdline", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "document-launch-powershell", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "document-network-traffic", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0011"]}, {"bi": "powershell-encoded-obfuscated-cmdline", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "powershell-remote-code-execution", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0011", "T1086"]}, {"bi": "document-wmi-process-create", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0005", "T1218"]}, {"bi": "feed-domain-document-network-traffic", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "network-snort-server", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "document-contains-high-wordcount", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": ["TA0005"]}, {"bi": "created-executable-in-user-dir", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "malware-emotet-file-drop", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "network-dns-doc-network-traffic", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "mitre_attack_tags": []}, {"bi": "document-direct-ip-traffic", "hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "document-exe-dropped", "hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "mitre_attack_tags": ["TA0002", "T1173"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "mitre_attack_tags": []}], "category": "Downloader", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Emotet is one of the most widely distributed and active malware families today. It is a highly modular threat that can deliver a wide variety of payloads. Emotet is commonly delivered via Microsoft Office documents with macros, sent as attachments on malicious emails.", "hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0", "fe69570cfe43c056f36d0a40929d53d4532cd181924613bda7436913979c33cb"], "iocs": {"domain": [{"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "host": "jinyangsheetmetal[.]co[.]kr"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "host": "www[.]dothome[.]co[.]kr"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "host": "guide-page[.]dothome[.]co[.]kr"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "host": "apps[.]digsigtrust[.]com"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "host": "apps[.]identrust[.]com"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "host": "ctldl[.]windowsupdate[.]com"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "host": "a767[.]dscg3[.]akamai[.]net"}, {"hashes": ["30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e"], "host": "auto[.]au[.]download[.]windowsupdate[.]com[.]c[.]footprint[.]net"}, {"hashes": ["0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701"], "host": "cs11[.]wpc[.]v0cdn[.]net"}, {"hashes": ["711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a"], "host": "e13678[.]dspb[.]akamaiedge[.]net"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "host": "wordy-words[.]com"}], "file": [{"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "path": "%HOMEPATH%\\Ib5wcmj"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "path": "%HOMEPATH%\\Ib5wcmj\\S76lego"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "path": "%HOMEPATH%\\Ib5wcmj\\S76lego\\V7qijxbn2.exe"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "path": "%HOMEPATH%\\Tnwkyvd"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "path": "%HOMEPATH%\\Tnwkyvd\\Rzr9729"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "path": "%HOMEPATH%\\Tnwkyvd\\Rzr9729\\Lr8xwzk5t.dll"}], "ip": [{"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "ip": "112[.]175[.]184[.]11"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3d931f3056e01ac585facd9cd6b2295bd63dbc6e340ccc4d94549533f42558e4", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "5faf67cb4b9dbfd86904abb00fed294cac743cafc127f9502b779ffc6aedb7c7", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ce", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9a666094b1345025d71c0b39d2adbd628fe43f2bc867345884787f6505777ce8", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "ip": "211[.]238[.]13[.]59"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701", "9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437", "bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e", "c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "ip": "192[.]35[.]177[.]64"}, {"hashes": ["0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d", "3ff0742359552875b1c51123cda087f09d97186d0f5540ada3e9611b8a94e9f9", "65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68", "8849667217cbf5aaf17be7bc7eaef3b073f32d6d7d7a6f36a022c270228a0d8b", "9cf25c48f4ec39224ac29cc1f585d0127b85a378dac61c893d5b383577137701"], "ip": "72[.]21[.]81[.]240"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5", "711fafda2f160ff5d89246ee698c4ba0738663a2a0a61469c401fc03f59b4550", "7d9599a9e2c14590ddd67015da53020abdbb1963fc03fac2a061a5aa15e4f0e1", "97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096f", "b25f82dbf33bc9cc154be6c8bef79aa2b570c84eba334f3fc27ae55681f6c154"], "ip": "23[.]46[.]238[.]193"}, {"hashes": ["401e3ed004f6a908758dcda91de701a2bf29c67379e11a3fa21438ceb5323864", "4184aff59a80548872251572d47d8a0f88865d08d8b944efeadb47c07d6f30d8", "61c90e0b60ab1ac4a891679a1e051a65654201f44b65be90543c41691ebe8204"], "ip": "23[.]46[.]238[.]194"}, {"hashes": ["9e05c0fe7a5abfed3c86b44e32efdad88d0417ebb89de20917ca9d131beb1cbc", "e1c18ef2692a84d679e77f98cb2d79c78ce841f999715235aa5aac42607ad26a"], "ip": "23[.]3[.]13[.]154"}, {"hashes": ["c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897", "ea4923d6d51058428ce3cac6ced475b5e024b7ae1974b0ce9f37f563847f89f0"], "ip": "23[.]3[.]13[.]88"}, {"hashes": ["30aa3f0d8ff2254375695811a076d309440d33b009b142827eb9e890dba07864", "aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "ip": "8[.]253[.]45[.]214"}, {"hashes": ["74e16bd58ef88cfbc4267cf32b54a6444f5a01675811af2f8da025c1dd9e7272", "ba76faaf67244b22ede91ccbdb43e3988b58539eeac446392d0c61afbb5ef437"], "ip": "8[.]249[.]219[.]254"}, {"hashes": ["7842ec4931932147604f75c89617191783e8dc127ebf81f6d312535a5cf40b51"], "ip": "23[.]46[.]238[.]232"}, {"hashes": ["54e4fc3613affad5354fc1058f7879031c1191f2e8e79b72df4673bae4603695"], "ip": "8[.]253[.]131[.]121"}, {"hashes": ["bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8e"], "ip": "8[.]249[.]241[.]254"}, {"hashes": ["01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5"], "ip": "99[.]86[.]230[.]14"}, {"hashes": ["0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0d"], "ip": "212[.]54[.]132[.]65"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "ip": "194[.]150[.]118[.]7"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "ip": "192[.]254[.]184[.]227"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "ip": "62[.]171[.]142[.]179"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "ip": "45[.]56[.]127[.]75"}, {"hashes": ["aa414e3dff891cabd67c28ee690955af72dbb5916a8b15e26e8df32a245fff68"], "ip": "45[.]77[.]154[.]161"}], "mutex": [], "registry": []}, "reports_count": 30}, "Win.Dropper.LokiBot-9783471-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "cta-static-analyzer-malicious", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "pe-uses-visual-basic", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "compound-vb-self-delete", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "registry-ie-zone-settings-modified", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e"], "mitre_attack_tags": []}, {"bi": "process-explorer-suspicious-launch", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "dns-excessive-domain-queries", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "process-check-virtualbox", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0007", "T1497"]}, {"bi": "registry-image-file-execution-debugger", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035", "T1060"]}, {"bi": "image-file-execution-options-set", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0004", "TA0003", "TA0005", "T1183"]}, {"bi": "image-file-execution-options-set-to-malicious-value", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0004", "TA0003", "TA0005", "T1183"]}, {"bi": "disables-windows-firewall", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "process-check-vmware", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0007", "T1497"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "potential-registry-persistence", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": []}, {"bi": "network-explorer-process", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0011", "TA0005", "T1055"]}, {"bi": "registry-disable-exception-chain-validation", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035"]}, {"bi": "file-ini-read", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": []}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "enumeration-browser-information", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1217"]}, {"bi": "process-hollowing-detected", "hashes": ["85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-generic-infostealer", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}, {"bi": "enumeration-cryptocurrency-information", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1145"]}, {"bi": "possible-dga-communication", "hashes": ["24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "mitre_attack_tags": ["TA0011", "TA0005", "T1483"]}, {"bi": "malware-lokibot-mutex-detected", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e"], "mitre_attack_tags": []}, {"bi": "windows-vault-api", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "modified-executable", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "sample-pe-modified-on-disk", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-compound-cta-activity", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "mitre_attack_tags": []}, {"bi": "files-deleted-used-batch", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "cmd-exe-file-execution", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "enumeration-email-program-information", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1114"]}, {"bi": "network-fast-flux-domain", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "malware-nanocore-artifact-detected", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": []}, {"bi": "dns-public-server-contacted", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "files-created-vbs", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": ["TA0002", "T1064"]}, {"bi": "startup-folder-modification", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "startup-folder-vbs-file", "hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "mitre_attack_tags": []}, {"bi": "feed-domain-banking", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": []}, {"bi": "listening-port-opened", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "unsigned-roaming-execution", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0005"]}, {"bi": "process-with-multiple-children", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0005"]}, {"bi": "file-alternate-data-stream-modification", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0005"]}, {"bi": "file-alternate-data-stream-creation", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0005", "T1096"]}, {"bi": "malware-zeus-mutex-detected", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": []}, {"bi": "sample-modified-deleted", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "malware-zeus-variant-av", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": []}, {"bi": "eml-same-sender-recipient", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0001", "T1193", "T1192"]}, {"bi": "outlook-express-com-server", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0009", "TA0008", "T1122", "T1175", "T1114"]}, {"bi": "eml-link", "hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "mitre_attack_tags": ["TA0001", "T1192"]}, {"bi": "crash-dump-file-created", "hashes": ["26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8"], "mitre_attack_tags": []}, {"bi": "artifact-windows-task", "hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "mitre_attack_tags": ["TA0002", "TA0003", "T1053"]}, {"bi": "windows-util-schtask", "hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "mitre_attack_tags": ["TA0003", "T1053"]}, {"bi": "windows-util-schtask-generic", "hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "mitre_attack_tags": ["TA0003", "T1053"]}, {"bi": "windows-util-schtask-create-onlogon", "hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "mitre_attack_tags": ["TA0003", "T1053"]}, {"bi": "malware-betabot-registry-key", "hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "mitre_attack_tags": ["TA0002", "TA0003", "T1059", "T1112"]}, {"bi": "excessive-dns-query-nxdomain", "hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-snort-indicator-compromise", "hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "nginx-webserver-detected", "hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "http-response-client-error", "hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "mitre_attack_tags": []}, {"bi": "process-long-cmdline", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-login-info-guest-modified", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1098"]}, {"bi": "malware-pony-stealer-detected", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": []}, {"bi": "malware-fareit-file-activity", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": []}, {"bi": "registry-login-info-modified", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1098"]}, {"bi": "process-check-opera-appdata-folder", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0007", "T1083"]}, {"bi": "cryptocurrency-stealer-detected", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": []}, {"bi": "enumeration-ftp-program-information", "hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Lokibot is an information-stealing malware designed to siphon off sensitive information stored on an infected device. It is modular in nature, supporting the ability to steal sensitive information from a number of popular applications. It is commonly pushed via malicious documents delivered via spam emails.", "hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8", "28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "iocs": {"domain": [{"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "13hjkz7513v64541852v65431b5411dxv24[.]su"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "13uhbt1z3tz78a56sdvghf1563451[.]ru"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "1376bad654134c667213[.]online"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "1378137613gbadz13567ds13[.]su"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "137zt67g1635r5bd671563gbzasduzh512[.]online"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "713zgjj2iigbh1766av441bsd67613[.]ru"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "7163zbh16356ztug13765gv541[.]su"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "asdjihnu1z763hubad6tn13[.]su"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "host": "hjadzgt613bhu8967rv61563fv[.]su"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "host": "ngnanoservebkup[.]duckdns[.]org"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "host": "yandex[.]ru"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "host": "hdfc[.]pp[.]ru"}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "host": "www5[.]tamareirashotelmg[.]com[.]br"}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "host": "www5[.]cdljussarago[.]com[.]br"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "host": "guardiasolutions[.]net"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "host": "specializedhelp[.]com"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "dolamosssepo[.]com"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "dolamosssepo[.]xyz"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]club"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]com"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]me"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]net"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]org"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]pw"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]space"}, {"hashes": ["fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "host": "rossmailers[.]xyz"}, {"hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "host": "ngnanoserve[.]duckdns[.]org"}], "file": [{"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "path": "%ProgramData%\\CPU Temp Monitor Service"}, {"hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0"], "path": "%APPDATA%\\D282E1"}, {"hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0"], "path": "%APPDATA%\\D282E1\\1E80C5.lck"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%APPDATA%\\D19AB989-A35F-4710-83DF-7B2DB7EFE7C5"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%APPDATA%\\D19AB989-A35F-4710-83DF-7B2DB7EFE7C5\\run.dat"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%APPDATA%\\D19AB989-A35F-4710-83DF-7B2DB7EFE7C5\\.lock"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%TEMP%\\date"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%TEMP%\\date\\quote.exe"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\quote.vbs"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Backup\\temp\\WindowsMail.MSMessageStore"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Backup\\temp\\WindowsMail.pat"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Backup\\temp\\edb00001.log"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Deleted Items\\winmail.fol"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Drafts\\winmail.fol"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Inbox\\winmail.fol"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Junk E-mail\\winmail.fol"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Outbox\\winmail.fol"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Sent Items\\winmail.fol"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\edbtmp.log"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\tmp.edb"}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "path": "%System32%\\Tasks\\Windows Update Check - 0x0B4E02AC"}, {"hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017"], "path": "%ProgramData%\\JJ9sapozc"}, {"hashes": ["4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e"], "path": "%ProgramData%\\CXPyQGazc"}, {"hashes": ["b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340"], "path": "%ProgramData%\\CPU Temp Monitor Service\\ilmionusa.txt"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "path": "%ProgramData%\\Google Updater 2.0\\cxoggqpqd.txt"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%TEMP%\\tmp7c845c7c.bat"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Ylax"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Ylax\\gagof.udw"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Yqpiuv"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Yqpiuv\\qare.exe"}, {"hashes": ["3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "path": "%ProgramData%\\CPU Temp Monitor Service\\mxqactxoj.txt"}, {"hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "path": "%TEMP%\\744937.bat"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%TEMP%\\ppcrlui_1744_2"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%TEMP%\\ppcrlui_1744_2.ui"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Inbox\\64C461B9-00000001.eml"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows Mail\\Local Folders\\Inbox\\64C461B9-00000001.eml:OECustomProperty"}, {"hashes": ["e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0"], "path": "%ProgramData%\\leeKSNozc"}, {"hashes": ["85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947"], "path": "%ProgramData%\\MfcpENUzc"}, {"hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "path": "%TEMP%\\1115081543.bat"}, {"hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%APPDATA%\\65A6ADC4-3F58-49D9-9621-BDB5D506807A\\catalog.dat"}, {"hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%APPDATA%\\65A6ADC4-3F58-49D9-9621-BDB5D506807A\\run.dat"}, {"hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%APPDATA%\\65A6ADC4-3F58-49D9-9621-BDB5D506807A\\storage.dat"}, {"hashes": ["f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "path": "%HOMEPATH%\\Start Menu\\Programs\\Startup\\quote.vbs"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%TEMP%\\tmp8d63eed4.bat"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Qiihy\\obnui.exe"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Uduf\\bofa.tmp"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Uduf\\bofa.tmp (copy)"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "path": "%APPDATA%\\Uduf\\bofa.ygq"}], "ip": [{"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "ip": "40[.]70[.]224[.]146"}, {"hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0"], "ip": "91[.]92[.]109[.]119"}, {"hashes": ["3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340"], "ip": "52[.]185[.]71[.]28"}, {"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "ip": "212[.]7[.]208[.]130"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "ip": "172[.]217[.]9[.]238"}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "ip": "40[.]76[.]4[.]15"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412"], "ip": "184[.]168[.]131[.]241"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "ip": "5[.]255[.]255[.]80"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "ip": "85[.]143[.]215[.]139"}], "mutex": [{"hashes": ["28dbcb7bd8d6840eba176889a10e8f5d8528f7f5fe106eeba30100c6f69f0ad4", "4305606a19e8b63fb41308f7a3f38fca04b24044ae1280ea4d6a2d397a708737", "5ac55094195cd455ffcfc8346f09b4ba0b9e58357c79a43d066df9bc8331e1ea", "bd3f0146d364ccb1ee962dcd59db6155c61d23fb6611166fdc91e08102416154", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "f1a377107ff8d2296e03bc4635ff5a93e79cf6bcfd7ecef67736ac879af42199", "f4c4ec48362c76dc0fd52f9833cb5eb8d90392de578d924411f710a58f36c7a6"], "name": "GLOBAL\\{<random GUID>}"}, {"hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "49c1f3b5b1996e2751a630b6241d00723e0776aaf4b148897cabc2830a068ceb", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0"], "name": "3749282D282E1E80C56CAE5A"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "name": "Global\\Instance0:  ESENT Performance Data Schema Version 85"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "name": "Local\\Identity CRL v1 File Access"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "name": "Local\\MSIdent Logon"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "name": "Local\\OutlookExpress_InstanceMutex_101897"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "name": "Local\\microsoft_thor_folder_notifyinfo_mutex"}, {"hashes": ["26db4171635e50e88c8a422e053c1b4f5b67faadd28b53aee6c281b6ccf03ae8"], "name": "Global\\77ccb2c1-1726-11eb-b5f8-00501e3ae7b6"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "name": "Local\\{<random GUID>}"}], "registry": [{"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.101", "value_name": "CheckSetting"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.103", "value_name": "CheckSetting"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.100", "value_name": "CheckSetting"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.102", "value_name": "CheckSetting"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.104", "value_name": "CheckSetting"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\STANDARDPROFILE", "value_name": "EnableFirewall"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SHAREDACCESS\\PARAMETERS\\FIREWALLPOLICY\\PUBLICPROFILE", "value_name": "EnableFirewall"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\SSDPSRV", "value_name": "Start"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RSTRUI.EXE", "value_name": null}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\RSTRUI.EXE", "value_name": "Debugger"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}", "value_name": null}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\GOOGLE UPDATER", "value_name": "LastUpdate"}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\MYMAILCLIENT", "value_name": null}, {"hashes": ["14feeadf0fbf5856bc79083adf435244943bfdd018507a74d9d3192a4ce75412", "1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a", "fcfe10d0c9181bf72eda69e3b51a7deff46b4380119cc74a0d9482a6560cc67b"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\GOOGLE UPDATER", "value_name": null}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41", "value_name": null}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "a659cfc22c71119"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "6888ba0030fb"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "971ae43462ae5e84a7f"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "e325b447a677a64e"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "54d42584b52325841"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "1a3c254271"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "25d466015585a2a"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "4c8756bdc22d7d231"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\BF4A0695A26DA0B1F", "value_name": null}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\55F941A93A30DC52", "value_name": null}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": null}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "44ca71f8ebd63ba2"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "7c4dcf10970d38f6"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\C28FB9BA8E7D", "value_name": "b7dda1e8438eab"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "CPU Temp Monitor Service"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c", "b5a0b908605a06004318174fbc1def50cdc1f42cdea53b856a1c307976c19340", "d4907d0cb2f6985564ef4c3307a27b035f5d56b6165ffb381cfde22a7053689a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "CPU Temp Monitor Service"}, {"hashes": ["366a6fd76d3c517bebf7ccd64bc9b7b521ad6f547f40e73e049d688c9fb78017", "4b2322030fa0897f8f52d9e12787b3948c6091d1acf4eb5cd298ce825ec3942e", "85b756bbf372ad8b726a1d6d90f1011d6aedaf886c784e3450e6e0e6ab51b947", "e8b3a9a3f1fa65e91baa02a2e44e60104dbd10ea469b33fbde9849e25a0aebf0"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "D282E1"}, {"hashes": ["1518a09576d0bae80814a6e77e7ff2867c8c50dcd32f9aa65f8f214696577cc4", "24bcedc2b52ddd789a3548c885b3cc24e9e108b854074aad8887c23d8ce99291", "3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "key": "<HKCU>\\SOFTWARE\\APPDATALOW\\SOFTWARE\\{3E0AE736-E36F-7A5F-0575-AB594FE2749A}\\0E121E41\\BF4A0695A26DA0B1F", "value_name": "4ff3347a5aa4"}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "key": "<HKCR>\\CLSID\\{15D84A1B-F928-D44D-B696-98F0574E04B7}\\0B4E02AC\\CS1", "value_name": null}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "key": "<HKCR>\\CLSID\\{15D84A1B-F928-D44D-B696-98F0574E04B7}\\0B4E02AC\\CW1", "value_name": null}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "key": "<HKCR>\\CLSID\\{15D84A1B-F928-D44D-B696-98F0574E04B7}\\0B4E02AC\\CW1", "value_name": "1852"}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "911k1e97"}, {"hashes": ["21ae30d6d1ba9896f7f4c88994eaeefe01985b5fa983d954c9783a90f5d53814"], "key": "<HKCR>\\CLSID\\{15D84A1B-F928-D44D-B696-98F0574E04B7}\\0B4E02AC\\CG1", "value_name": "GLA"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WOAW", "value_name": "Iviky"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "qare.exe"}, {"hashes": ["3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\19YU377IU13.EXE", "value_name": null}, {"hashes": ["3a4512bd99ced05daefa040cecd76389da354bdc5bbd56d28b44dfea3b50da3c"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\19YU377IU13.EXE", "value_name": "DisableExceptionChainValidation"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WOAW", "value_name": "Voyqawx"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS MAIL", "value_name": "LastBackup"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\IDENTITYCRL\\DYNAMIC SALT", "value_name": "Value"}, {"hashes": ["f0dc81ec4e9bea857546d420eb08441e6afc12497b92eb05864a89967303e1d4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS MAIL", "value_name": "LastRun"}, {"hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "key": "<HKLM>\\SAM\\SAM\\DOMAINS\\ACCOUNT\\USERS\\000003E9", "value_name": "F"}, {"hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "key": "<HKLM>\\SAM\\SAM\\DOMAINS\\ACCOUNT\\USERS\\000001F5", "value_name": "F"}, {"hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "key": "<HKLM>\\SAM\\SAM\\DOMAINS\\ACCOUNT\\USERS\\000003EC", "value_name": "F"}, {"hashes": ["4fca81a53d5943adbb7efc3f6facfb18369683fa9ef5839a7cb65bf4b695d332"], "key": "<HKCU>\\SOFTWARE\\WINRAR", "value_name": "HWID"}]}, "reports_count": 22}, "Win.Dropper.NetWire-9781821-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-imports-toolhelp", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "malware-netwire-artifact", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "malware-netwire-mutex", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "created-executable-in-user-dir", "hashes": ["abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "registry-activesetup-key-modified", "hashes": ["abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "unsigned-roaming-execution", "hashes": ["abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a"], "mitre_attack_tags": ["TA0005"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438"], "mitre_attack_tags": []}, {"bi": "network-dns-safe-categories", "hashes": ["010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "dns-dynamic-domain", "hashes": ["604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "network-fast-flux-domain", "hashes": ["25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0"], "mitre_attack_tags": []}, {"bi": "network-dns-category-p2psharing", "hashes": ["e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7"], "mitre_attack_tags": []}, {"bi": "network-snort-app-detect", "hashes": ["25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3"], "mitre_attack_tags": []}, {"bi": "localhost-ipaddress-detected", "hashes": ["19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "artifact-windows-component-suspicious-creation", "hashes": ["28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "network-snort-malware", "hashes": ["fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e"], "mitre_attack_tags": []}, {"bi": "process-sysinternals-used", "hashes": ["6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb"], "mitre_attack_tags": []}, {"bi": "network-dns-category-parked-domain", "hashes": ["e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459"], "mitre_attack_tags": []}, {"bi": "malware-misspell-binary", "hashes": ["a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av", "hashes": ["43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46"], "mitre_attack_tags": []}, {"bi": "network-private-ip-address", "hashes": ["9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "altered-sample-dns-flagged", "hashes": ["8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac"], "mitre_attack_tags": ["TA0005", "T1102"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "NetWire is a remote access trojan (RAT) that allows attackers to execute commands on the infected host, log keystrokes, interact with a webcam, remote desktop, and read data from connected USB devices. NetWire is commonly delivered through Microsoft Office documents with macros, sent as attachments on malicious emails.", "hashes": ["010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "020116ae5b985aee52a6bd8800f8ad3b98f55da90c3f54d93be1313d25fb45a8", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "03ea506f92056b35a22d762cd63387e1d4afd46219a17b0d31630554a3540c97", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "1ee1b6b01852c2b69b0e6e3f189ad34f33322e6fd40228a0f18b3e9b0f7e4638", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "208cd4d94a662ef23e1e195ac75c1b2e96e1070999ff7bdb2949c232b94c9fae", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "2495fc9263f20da7c56561306d9d18a3007ff662fb5cd6cb698fdae72c16424a", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "25e09b45bb5e50ae43c920db37dcbe9574f7249903eaa8673cd67dff35173b1b", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "295425edde4859bb1a5cf81614133be823e0a1cce960d65a85c0e87a063f25a7", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "358059151e8f2c9aa713d55ef0edc27e91254370b26ab3142f0473a7efd26f2f", "361a59b9b0e7542b37f25500b23e2d6d72fac06dfefe44bb2c9d2e2f436ee0d4", "3878a41a06074dd0ef6c4e3434d476b47806899ba91bbb92c0c02028f3780376", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "3a2a009d7b6b0deca283bed62e5b03041b10987d1d855860d790c33c8f301103", "3ad26f49f303568acb0fd6a6076d2fa6853f940484ebd3bf17df6b7b36fc29a2", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "3b6451d837756433e318f1f115ebef1b354f0222e3d37efe39d186cb7e2bcf9a", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "42c0620e9bb9b9aa1bd5bb657b4ca8ad99ef33997e4897d2ff1f3a6511f3b979", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "4445fa5e8a93b54c573b5311e6aaecd6c10704f5666724b83e07c97e9df98e03", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "56cfd16732676a370abeee9fa54e31ec6ac9eb2cbe68690cd6dce2d8f27b0178", "5a455ddd2e3199ab05810a8c88ffa5971c19b89fa89e86e63e2ebf31cc658efe", "5ab0e9e604de1127576e0167ffe99ce3e45c09b8a64d49734cadb22675dda933", "5b67d613715c49faef5a392e752d54d8ffecd4c84ca6d0da50dd05f6725a4228", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "5d2725afb59f0065eeadbfbab91ff8df8ea29f90bc09a8d7f233e258def7b507", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "615fc8c480e5af715b5128a0c83b3833bb93ff20564fab054f4f05bf3a8e6ecf", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "6517e91138ccfa4d5f8d1fd751b0493b4cea20e6c89323d2341aa1ad28247525", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "66cc2ed250de4e272c2e67e74206414514015e568668af002c18a7fd870e1ec4", "671f8f6bc2ff6d3b5e2cbf78628835ebd97eace8b1c6fefda38cd5ad3c0b902b", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "6903ad411a038c8d187ace655a3a84cd02df36c94efc50e3c7c40a802b3479bb", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "6a0e7c5f67289e86bf83618c3be2ef20f214361c25bf25e4b86c07bf072bca72", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "6eff043e7c1e931c214097d432e6f3bd6712e780967ec50b31775b8d2354e23d", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "709b5ff054c6b6b7fbc3ef3df37b0e0fa592cfb425653db7418d65696ee66dd8", "72277fe0db56751716d039a9d259f99cd399162b7b1f05627d476916a529810b", "731aed58a6ab249f014ab5869ff43700782de07e34e45828af5b2f56d03fc536", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "75778a79212021ccf302b31ac59a2549b93765d7316885cf76cb6f92973bd026", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "780e36d5f35979acdf18c1ab74cbcaf57af77991ff44c6e6a94afed72e4010d1", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "7bbba7243370a16754b468ca09ddc57dcaacd242c41a1f658c1c74f68f4cd011", "7c2c346a0aeca305582db0ad90eb68a3e946bbcfcc881aa1ed8e60b648b824f3", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "826edc2b13dd7bcd1fa052f2532764a01b67a56b184e44b1cd9ac3dc9e9427d9", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "860468d7cf01b4e534685acb164b6137763007583eee4e6f656550eacb8318f2", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "8b10a123e5ce9b1d44739c9afca499c4e6c632b48f38395d91a803b9c604f622", "8b38deaf4ecea02607017a82b29a42d6bc59a5a74bbc51d80868bb083a46f3ec", "8b5c059a2ce1396d8b3d847d091e0f58dfd345ebef38703e3fbc4072214bc633", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "8fc9042f9ed56eb4951474bad52248f68b49efd5f5ee79a4a5351992f4fb09b6", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "a3e935108d6f64d3212ea1abcb1f4aa250e248a3b6f70fda91e73dafdf02e1ef", "a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "aef0c250f81c91b01e91382a6406019445947b2c0efa655e8c3bdf410c310b3e", "af3d0bb54b9d74ec2021af6fb8a8e04043e8ae4fe206ec85a0ddf7021280b7d5", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "b096b8b68fe1bfdf985b6af14e8d0628c6741c284587a4ad0184d2227a94efbd", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "b544209104b1197945d6dc5df29ff2dcc55f551510a1c0a7a792d5c00be208df", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "bdf9e3ed3ea2d35a2b1c290d0410ff16575c0b67a7b0284012afdeecd7aed92f", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "c47f5ee529261092d0967882b1ccd9bdb215b638dbffa9ee2e9de2b844ef48fb", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "ca5f3246e0262734e3eed9c745005abe1bec3ba947e26a2ae4635743f61e5ef6", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "ce21c280755d780f2c7eb8c463def5465e66c6a152e82f51fdf9488290767482", "ce9f3ef57bdf35724e94bb71c7141b2b41e7815c62ebe6973b7736a64c2d88c0", "cece51d6ee7738a4caa6b0b960dc8102babc27bf2f74862cf402af2e3a0ba325", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "dea6534260b7712c4d33663673f3f975848c8d59da925f7d7661f3e965c95d39", "deced389648fa5e0866f2267adf9e27973e08797740d00779041921dcc91f88e", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "dff9c564c3520594ea1fdc4b0a5d840b7c648764a5b4d9fbb7e0944f14618888", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264", "e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "e3a9e85263b1e24e5acaa65d7ac6997dededd9665769b1315cfd77ea42cf7c13", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "f825ce94d496b674ebd22aff3b27068409a686860920917d5f07ca85fa57f0fe", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "fb9952d3febeaee18bd520615fceb1dc7cd3f9226183b35819c1b1df9e8987eb", "fd769ad0be242ad1b3eea869899b398ef8ad8f6456b53f44ad8b84de41a20b93", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "fec8f111413ce9e7f2c6ceee5c5e204ef45f83f26741084f492c1a475ce76507", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "ffaa5dee2950e74958ae5063c804c26c1913bfeafee62e72b45675cc1c9573ea"], "iocs": {"domain": [{"hashes": ["0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae"], "host": "yorkiepet[.]ddns[.]net"}, {"hashes": ["33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599"], "host": "frankief[.]hopto[.]me"}, {"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "host": "local[.]cable-modem[.]org"}, {"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "host": "teamviewer[.]ddns[.]net"}, {"hashes": ["34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355"], "host": "steven11[.]ddns[.]net"}, {"hashes": ["689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5"], "host": "alertsdanish[.]bounceme[.]net"}, {"hashes": ["19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab"], "host": "online4y[.]ddns[.]net"}, {"hashes": ["03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b"], "host": "alibabaoffice[.]ddns[.]net"}, {"hashes": ["52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2"], "host": "tomekgos3[.]ddns[.]net"}, {"hashes": ["0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665"], "host": "moneybank[.]dyndns[.]info"}, {"hashes": ["03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b"], "host": "mcpvpserver3[.]no-ip[.]org"}, {"hashes": ["336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d"], "host": "nightwolf[.]dyndns-ip[.]com"}, {"hashes": ["25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "host": "logmein[.]loginto[.]me"}, {"hashes": ["5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b"], "host": "living2013mh[.]no-ip[.]biz"}, {"hashes": ["87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5"], "host": "silver13[.]ddns[.]net"}, {"hashes": ["0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152"], "host": "wesleydan[.]noip[.]me"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d"], "host": "nimda2[.]ddns[.]net"}, {"hashes": ["3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe"], "host": "doncj[.]3utilities[.]com"}, {"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee"], "host": "tvnserver[.]serveftp[.]com"}, {"hashes": ["5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7"], "host": "kingp96[.]chickenkiller[.]com"}, {"hashes": ["3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b"], "host": "okobino23[.]no-ip[.]biz"}, {"hashes": ["69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551"], "host": "am[.]markussols[.]com"}, {"hashes": ["200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7"], "host": "jingledenver[.]ddns[.]net"}, {"hashes": ["28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb"], "host": "kilbitoke[.]ddns[.]net"}, {"hashes": ["4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30"], "host": "counterstrikemur[.]chickenkiller[.]com"}, {"hashes": ["8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438"], "host": "safeh20[.]no-ip[.]biz"}, {"hashes": ["8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438"], "host": "updateclient[.]linkpc[.]net"}, {"hashes": ["5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "host": "filezela[.]serveftp[.]com"}, {"hashes": ["5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "host": "optic[.]cable-modem[.]org"}, {"hashes": ["5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "host": "teamviewer[.]ddns[.]me"}, {"hashes": ["c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3"], "host": "fatboyslimhf[.]no-ip[.]biz"}, {"hashes": ["d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6"], "host": "kiki[.]dyndns-ip[.]com"}, {"hashes": ["9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf"], "host": "win[.]kvd6[.]com"}, {"hashes": ["018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d"], "host": "vagacarga[.]ddns[.]net"}, {"hashes": ["229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb"], "host": "casinovic[.]ddns[.]net"}, {"hashes": ["e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "host": "sophiumpentest[.]cechire[.]com"}, {"hashes": ["eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8"], "host": "ken505050[.]no-ip[.]org"}, {"hashes": ["7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46"], "host": "fre[.]ishareda[.]com"}, {"hashes": ["e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2"], "host": "edniyasmith[.]mooo[.]com"}, {"hashes": ["d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b"], "host": "stremps[.]no-ip[.]org"}, {"hashes": ["f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a"], "host": "philipjames[.]chickenkiller[.]com"}, {"hashes": ["df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2"], "host": "vadj221[.]ddns[.]net"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "host": "gistelboer[.]chickenkiller[.]com"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "host": "hattaa[.]ddns[.]net"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "host": "hattagoor[.]jumpingcrab[.]com"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "host": "henklawatzam[.]no-ip[.]info"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "host": "limvorhokzwam[.]no-ip[.]biz"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "host": "rambaraswapp[.]chickenkiller[.]com"}, {"hashes": ["f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603"], "host": "n64netplay[.]ddns[.]net"}, {"hashes": ["e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a"], "host": "withtime[.]hopper[.]pw"}], "file": [{"hashes": ["010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "020116ae5b985aee52a6bd8800f8ad3b98f55da90c3f54d93be1313d25fb45a8", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "208cd4d94a662ef23e1e195ac75c1b2e96e1070999ff7bdb2949c232b94c9fae", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "25e09b45bb5e50ae43c920db37dcbe9574f7249903eaa8673cd67dff35173b1b", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "295425edde4859bb1a5cf81614133be823e0a1cce960d65a85c0e87a063f25a7", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "358059151e8f2c9aa713d55ef0edc27e91254370b26ab3142f0473a7efd26f2f", "361a59b9b0e7542b37f25500b23e2d6d72fac06dfefe44bb2c9d2e2f436ee0d4", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "3a2a009d7b6b0deca283bed62e5b03041b10987d1d855860d790c33c8f301103", "3ad26f49f303568acb0fd6a6076d2fa6853f940484ebd3bf17df6b7b36fc29a2", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "3b6451d837756433e318f1f115ebef1b354f0222e3d37efe39d186cb7e2bcf9a", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "42c0620e9bb9b9aa1bd5bb657b4ca8ad99ef33997e4897d2ff1f3a6511f3b979", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "4445fa5e8a93b54c573b5311e6aaecd6c10704f5666724b83e07c97e9df98e03", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "5ab0e9e604de1127576e0167ffe99ce3e45c09b8a64d49734cadb22675dda933", "5b67d613715c49faef5a392e752d54d8ffecd4c84ca6d0da50dd05f6725a4228", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "5d2725afb59f0065eeadbfbab91ff8df8ea29f90bc09a8d7f233e258def7b507", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "615fc8c480e5af715b5128a0c83b3833bb93ff20564fab054f4f05bf3a8e6ecf", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "6517e91138ccfa4d5f8d1fd751b0493b4cea20e6c89323d2341aa1ad28247525", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "6903ad411a038c8d187ace655a3a84cd02df36c94efc50e3c7c40a802b3479bb", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "6a0e7c5f67289e86bf83618c3be2ef20f214361c25bf25e4b86c07bf072bca72", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "709b5ff054c6b6b7fbc3ef3df37b0e0fa592cfb425653db7418d65696ee66dd8", "72277fe0db56751716d039a9d259f99cd399162b7b1f05627d476916a529810b", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "75778a79212021ccf302b31ac59a2549b93765d7316885cf76cb6f92973bd026", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "780e36d5f35979acdf18c1ab74cbcaf57af77991ff44c6e6a94afed72e4010d1", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "7bbba7243370a16754b468ca09ddc57dcaacd242c41a1f658c1c74f68f4cd011", "7c2c346a0aeca305582db0ad90eb68a3e946bbcfcc881aa1ed8e60b648b824f3", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "826edc2b13dd7bcd1fa052f2532764a01b67a56b184e44b1cd9ac3dc9e9427d9", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "860468d7cf01b4e534685acb164b6137763007583eee4e6f656550eacb8318f2", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "8b10a123e5ce9b1d44739c9afca499c4e6c632b48f38395d91a803b9c604f622", "8b38deaf4ecea02607017a82b29a42d6bc59a5a74bbc51d80868bb083a46f3ec", "8b5c059a2ce1396d8b3d847d091e0f58dfd345ebef38703e3fbc4072214bc633", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "a3e935108d6f64d3212ea1abcb1f4aa250e248a3b6f70fda91e73dafdf02e1ef", "a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "aef0c250f81c91b01e91382a6406019445947b2c0efa655e8c3bdf410c310b3e", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "b096b8b68fe1bfdf985b6af14e8d0628c6741c284587a4ad0184d2227a94efbd", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "b544209104b1197945d6dc5df29ff2dcc55f551510a1c0a7a792d5c00be208df", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "bdf9e3ed3ea2d35a2b1c290d0410ff16575c0b67a7b0284012afdeecd7aed92f", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "ca5f3246e0262734e3eed9c745005abe1bec3ba947e26a2ae4635743f61e5ef6", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "ce21c280755d780f2c7eb8c463def5465e66c6a152e82f51fdf9488290767482", "ce9f3ef57bdf35724e94bb71c7141b2b41e7815c62ebe6973b7736a64c2d88c0", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "dea6534260b7712c4d33663673f3f975848c8d59da925f7d7661f3e965c95d39", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264", "e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "e3a9e85263b1e24e5acaa65d7ac6997dededd9665769b1315cfd77ea42cf7c13", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "f825ce94d496b674ebd22aff3b27068409a686860920917d5f07ca85fa57f0fe", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "fb9952d3febeaee18bd520615fceb1dc7cd3f9226183b35819c1b1df9e8987eb", "fd769ad0be242ad1b3eea869899b398ef8ad8f6456b53f44ad8b84de41a20b93", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "fec8f111413ce9e7f2c6ceee5c5e204ef45f83f26741084f492c1a475ce76507", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "ffaa5dee2950e74958ae5063c804c26c1913bfeafee62e72b45675cc1c9573ea"], "path": "\\TEMP\\.Identifier"}, {"hashes": ["018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "295425edde4859bb1a5cf81614133be823e0a1cce960d65a85c0e87a063f25a7", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "361a59b9b0e7542b37f25500b23e2d6d72fac06dfefe44bb2c9d2e2f436ee0d4", "3b6451d837756433e318f1f115ebef1b354f0222e3d37efe39d186cb7e2bcf9a", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "5b67d613715c49faef5a392e752d54d8ffecd4c84ca6d0da50dd05f6725a4228", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "6903ad411a038c8d187ace655a3a84cd02df36c94efc50e3c7c40a802b3479bb", "6a0e7c5f67289e86bf83618c3be2ef20f214361c25bf25e4b86c07bf072bca72", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "aef0c250f81c91b01e91382a6406019445947b2c0efa655e8c3bdf410c310b3e", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "bdf9e3ed3ea2d35a2b1c290d0410ff16575c0b67a7b0284012afdeecd7aed92f", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "ce9f3ef57bdf35724e94bb71c7141b2b41e7815c62ebe6973b7736a64c2d88c0", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "e3a9e85263b1e24e5acaa65d7ac6997dededd9665769b1315cfd77ea42cf7c13", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "f825ce94d496b674ebd22aff3b27068409a686860920917d5f07ca85fa57f0fe", "fb9952d3febeaee18bd520615fceb1dc7cd3f9226183b35819c1b1df9e8987eb", "fd769ad0be242ad1b3eea869899b398ef8ad8f6456b53f44ad8b84de41a20b93", "fec8f111413ce9e7f2c6ceee5c5e204ef45f83f26741084f492c1a475ce76507", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "ffaa5dee2950e74958ae5063c804c26c1913bfeafee62e72b45675cc1c9573ea"], "path": "%APPDATA%\\Install"}, {"hashes": ["018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "295425edde4859bb1a5cf81614133be823e0a1cce960d65a85c0e87a063f25a7", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "361a59b9b0e7542b37f25500b23e2d6d72fac06dfefe44bb2c9d2e2f436ee0d4", "3b6451d837756433e318f1f115ebef1b354f0222e3d37efe39d186cb7e2bcf9a", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "5b67d613715c49faef5a392e752d54d8ffecd4c84ca6d0da50dd05f6725a4228", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "6903ad411a038c8d187ace655a3a84cd02df36c94efc50e3c7c40a802b3479bb", "6a0e7c5f67289e86bf83618c3be2ef20f214361c25bf25e4b86c07bf072bca72", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "aef0c250f81c91b01e91382a6406019445947b2c0efa655e8c3bdf410c310b3e", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "bdf9e3ed3ea2d35a2b1c290d0410ff16575c0b67a7b0284012afdeecd7aed92f", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "ce9f3ef57bdf35724e94bb71c7141b2b41e7815c62ebe6973b7736a64c2d88c0", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "e3a9e85263b1e24e5acaa65d7ac6997dededd9665769b1315cfd77ea42cf7c13", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "f825ce94d496b674ebd22aff3b27068409a686860920917d5f07ca85fa57f0fe", "fb9952d3febeaee18bd520615fceb1dc7cd3f9226183b35819c1b1df9e8987eb", "fd769ad0be242ad1b3eea869899b398ef8ad8f6456b53f44ad8b84de41a20b93", "fec8f111413ce9e7f2c6ceee5c5e204ef45f83f26741084f492c1a475ce76507", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "ffaa5dee2950e74958ae5063c804c26c1913bfeafee62e72b45675cc1c9573ea"], "path": "%APPDATA%\\Install\\.Identifier"}, {"hashes": ["018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "295425edde4859bb1a5cf81614133be823e0a1cce960d65a85c0e87a063f25a7", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "361a59b9b0e7542b37f25500b23e2d6d72fac06dfefe44bb2c9d2e2f436ee0d4", "3b6451d837756433e318f1f115ebef1b354f0222e3d37efe39d186cb7e2bcf9a", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "6903ad411a038c8d187ace655a3a84cd02df36c94efc50e3c7c40a802b3479bb", "6a0e7c5f67289e86bf83618c3be2ef20f214361c25bf25e4b86c07bf072bca72", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "aef0c250f81c91b01e91382a6406019445947b2c0efa655e8c3bdf410c310b3e", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "bdf9e3ed3ea2d35a2b1c290d0410ff16575c0b67a7b0284012afdeecd7aed92f", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "ce9f3ef57bdf35724e94bb71c7141b2b41e7815c62ebe6973b7736a64c2d88c0", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "e3a9e85263b1e24e5acaa65d7ac6997dededd9665769b1315cfd77ea42cf7c13", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "f825ce94d496b674ebd22aff3b27068409a686860920917d5f07ca85fa57f0fe", "fb9952d3febeaee18bd520615fceb1dc7cd3f9226183b35819c1b1df9e8987eb", "fd769ad0be242ad1b3eea869899b398ef8ad8f6456b53f44ad8b84de41a20b93", "fec8f111413ce9e7f2c6ceee5c5e204ef45f83f26741084f492c1a475ce76507", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4", "ffaa5dee2950e74958ae5063c804c26c1913bfeafee62e72b45675cc1c9573ea"], "path": "%APPDATA%\\Install\\Host.exe"}, {"hashes": ["010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "020116ae5b985aee52a6bd8800f8ad3b98f55da90c3f54d93be1313d25fb45a8", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "03ea506f92056b35a22d762cd63387e1d4afd46219a17b0d31630554a3540c97", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "1ee1b6b01852c2b69b0e6e3f189ad34f33322e6fd40228a0f18b3e9b0f7e4638", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "208cd4d94a662ef23e1e195ac75c1b2e96e1070999ff7bdb2949c232b94c9fae", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb"], "path": "%SystemRoot%\\SERVIC~2\\Local Settings\\AppData\\Local\\Temp\\MpCmdRun.log"}, {"hashes": ["010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "020116ae5b985aee52a6bd8800f8ad3b98f55da90c3f54d93be1313d25fb45a8", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "208cd4d94a662ef23e1e195ac75c1b2e96e1070999ff7bdb2949c232b94c9fae", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb"], "path": "\\.Identifier"}, {"hashes": ["1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "615fc8c480e5af715b5128a0c83b3833bb93ff20564fab054f4f05bf3a8e6ecf", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "860468d7cf01b4e534685acb164b6137763007583eee4e6f656550eacb8318f2", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb"], "path": "%APPDATA%\\<random, matching '[a-z0-9]{3,7}'>"}, {"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "path": "%APPDATA%\\Install\\crhome.exe"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "path": "%LOCALAPPDATA%\\Google"}, {"hashes": ["03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b"], "path": "%APPDATA%\\Microsoft\\.Identifier"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "path": "%LOCALAPPDATA%\\Google\\Chrome"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "path": "%LOCALAPPDATA%\\Google\\Chrome\\User Data"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "path": "%LOCALAPPDATA%\\Google\\Chrome\\User Data\\.Identifier"}, {"hashes": ["39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3"], "path": "%APPDATA%\\Mircosoft\\.Identifier"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d"], "path": "%LOCALAPPDATA%\\Google\\Chrome\\User Data\\Chrome_browser.exe"}, {"hashes": ["39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3"], "path": "%APPDATA%\\Mircosoft\\crsss.exe"}, {"hashes": ["6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb"], "path": "%APPDATA%\\TCPview\\.Identifier"}, {"hashes": ["6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb"], "path": "%APPDATA%\\TCPview\\Tcpview.exe"}, {"hashes": ["689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2"], "path": "%APPDATA%\\Install\\Adobe.exe"}, {"hashes": ["28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb"], "path": "%APPDATA%\\Local\\Microsoft\\Windows\\.Identifier"}, {"hashes": ["28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb"], "path": "%APPDATA%\\Local\\Microsoft\\Windows\\svchost.exe"}, {"hashes": ["6517e91138ccfa4d5f8d1fd751b0493b4cea20e6c89323d2341aa1ad28247525", "b544209104b1197945d6dc5df29ff2dcc55f551510a1c0a7a792d5c00be208df"], "path": "%APPDATA%\\.Identifier"}, {"hashes": ["9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b"], "path": "%APPDATA%\\Install\\iexplorer.exe"}, {"hashes": ["a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "path": "%APPDATA%\\Install\\111\\27\\897\\89\\78\\2\\278\\97\\89\\34\\52\\53\\1\\23\\234234234\\255656\\78978978\\789789\\.Identifier"}, {"hashes": ["a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "path": "%APPDATA%\\Install\\111\\27\\897\\89\\78\\2\\278\\97\\89\\34\\52\\53\\1\\23\\234234234"}, {"hashes": ["a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "path": "%APPDATA%\\Install\\111\\27\\897\\89\\78\\2\\278\\97\\89\\34\\52\\53\\1\\23\\234234234\\255656"}, {"hashes": ["a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "path": "%APPDATA%\\Install\\111\\27\\897\\89\\78\\2\\278\\97\\89\\34\\52\\53\\1\\23\\234234234\\255656\\78978978"}, {"hashes": ["a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "path": "%APPDATA%\\Install\\111\\27\\897\\89\\78\\2\\278\\97\\89\\34\\52\\53\\1\\23\\234234234\\255656\\78978978\\789789"}, {"hashes": ["a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "path": "%APPDATA%\\Install\\111\\27\\897\\89\\78\\2\\278\\97\\89\\34\\52\\53\\1\\23\\234234234\\255656\\78978978\\789789\\Host.exe"}, {"hashes": ["1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc"], "path": "%APPDATA%\\svchost\\svchost.exe"}, {"hashes": ["1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc"], "path": "%APPDATA%\\svchost\\.Identifier"}, {"hashes": ["03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9"], "path": "%APPDATA%\\Microsoft\\sppsvc.exe"}, {"hashes": ["0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db"], "path": "%HOMEPATH%\\AppData\\RoamingMicosoft\\.Identifier"}, {"hashes": ["0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db"], "path": "%HOMEPATH%\\AppData\\RoamingMicosoft\\crsss.exe"}, {"hashes": ["194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb"], "path": "%APPDATA%\\Microsoft\\wins-host.exe"}, {"hashes": ["7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46"], "path": "%APPDATA%\\rundll\\rundll.exe"}, {"hashes": ["827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212"], "path": "%APPDATA%\\Active Directory Controller\\.Identifier"}, {"hashes": ["827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212"], "path": "%APPDATA%\\Active Directory Controller\\conhost.exe"}, {"hashes": ["c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41"], "path": "%LOCALAPPDATA%\\Google\\Chrome\\User Data\\updete.exe"}, {"hashes": ["b544209104b1197945d6dc5df29ff2dcc55f551510a1c0a7a792d5c00be208df"], "path": "%APPDATA%\\msjavaupdate32.exe"}, {"hashes": ["dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd"], "path": "%APPDATA%\\Microsoft\\daHost.exe"}, {"hashes": ["d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4"], "path": "%APPDATA%\\JavaRuntimeEnvironnement\\.Identifier"}, {"hashes": ["d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4"], "path": "%APPDATA%\\JavaRuntimeEnvironnement\\Updater.exe"}, {"hashes": ["d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5"], "path": "%APPDATA%\\Install\\winvnc.exe"}, {"hashes": ["d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414"], "path": "%APPDATA%\\Install\\Sophos.exe"}, {"hashes": ["ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658"], "path": "%APPDATA%\\Install\\alg.exe"}, {"hashes": ["de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "path": "%LOCALAPPDATA%\\Google\\Chrome\\User Data\\Chrome_new.exe"}, {"hashes": ["f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603"], "path": "%APPDATA%\\Adobe\\Flash Player\\APSPrivateData2\\.Identifier"}, {"hashes": ["f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603"], "path": "%APPDATA%\\Adobe\\Flash Player\\APSPrivateData2\\update.exe"}, {"hashes": ["f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b"], "path": "%APPDATA%\\Microsoft\\datHost.exe"}], "ip": [{"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "ip": "125[.]163[.]105[.]123"}, {"hashes": ["615fc8c480e5af715b5128a0c83b3833bb93ff20564fab054f4f05bf3a8e6ecf", "6517e91138ccfa4d5f8d1fd751b0493b4cea20e6c89323d2341aa1ad28247525", "860468d7cf01b4e534685acb164b6137763007583eee4e6f656550eacb8318f2"], "ip": "37[.]48[.]80[.]173"}, {"hashes": ["8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438"], "ip": "67[.]214[.]175[.]69"}, {"hashes": ["3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b"], "ip": "94[.]73[.]33[.]36"}, {"hashes": ["9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264"], "ip": "138[.]197[.]221[.]199"}, {"hashes": ["d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6"], "ip": "138[.]197[.]221[.]196"}, {"hashes": ["0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7"], "ip": "172[.]217[.]197[.]95"}, {"hashes": ["0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7"], "ip": "209[.]85[.]201[.]94"}, {"hashes": ["0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7"], "ip": "173[.]194[.]208[.]94"}, {"hashes": ["3ad26f49f303568acb0fd6a6076d2fa6853f940484ebd3bf17df6b7b36fc29a2", "72277fe0db56751716d039a9d259f99cd399162b7b1f05627d476916a529810b"], "ip": "37[.]46[.]114[.]246"}, {"hashes": ["3b6451d837756433e318f1f115ebef1b354f0222e3d37efe39d186cb7e2bcf9a", "fec8f111413ce9e7f2c6ceee5c5e204ef45f83f26741084f492c1a475ce76507"], "ip": "5[.]254[.]112[.]53"}, {"hashes": ["8b38deaf4ecea02607017a82b29a42d6bc59a5a74bbc51d80868bb083a46f3ec", "b544209104b1197945d6dc5df29ff2dcc55f551510a1c0a7a792d5c00be208df"], "ip": "188[.]190[.]100[.]82"}, {"hashes": ["780e36d5f35979acdf18c1ab74cbcaf57af77991ff44c6e6a94afed72e4010d1", "826edc2b13dd7bcd1fa052f2532764a01b67a56b184e44b1cd9ac3dc9e9427d9"], "ip": "216[.]38[.]2[.]214"}, {"hashes": ["7bbba7243370a16754b468ca09ddc57dcaacd242c41a1f658c1c74f68f4cd011", "b096b8b68fe1bfdf985b6af14e8d0628c6741c284587a4ad0184d2227a94efbd"], "ip": "81[.]64[.]53[.]223"}, {"hashes": ["a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "ip": "212[.]7[.]208[.]83"}, {"hashes": ["9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf"], "ip": "3[.]134[.]22[.]63"}, {"hashes": ["9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf"], "ip": "3[.]129[.]252[.]224"}, {"hashes": ["c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "ip": "86[.]20[.]109[.]42"}, {"hashes": ["c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3"], "ip": "84[.]197[.]77[.]47"}, {"hashes": ["c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3"], "ip": "151[.]236[.]15[.]24"}, {"hashes": ["c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3"], "ip": "46[.]246[.]126[.]193"}, {"hashes": ["0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7"], "ip": "172[.]217[.]197[.]100/31"}, {"hashes": ["020116ae5b985aee52a6bd8800f8ad3b98f55da90c3f54d93be1313d25fb45a8"], "ip": "46[.]244[.]18[.]141"}, {"hashes": ["208cd4d94a662ef23e1e195ac75c1b2e96e1070999ff7bdb2949c232b94c9fae"], "ip": "185[.]17[.]1[.]208"}, {"hashes": ["5ab0e9e604de1127576e0167ffe99ce3e45c09b8a64d49734cadb22675dda933"], "ip": "5[.]56[.]133[.]55"}, {"hashes": ["6a0e7c5f67289e86bf83618c3be2ef20f214361c25bf25e4b86c07bf072bca72"], "ip": "185[.]17[.]1[.]192"}, {"hashes": ["1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4"], "ip": "191[.]101[.]31[.]75"}, {"hashes": ["5b67d613715c49faef5a392e752d54d8ffecd4c84ca6d0da50dd05f6725a4228"], "ip": "185[.]11[.]145[.]57"}, {"hashes": ["42c0620e9bb9b9aa1bd5bb657b4ca8ad99ef33997e4897d2ff1f3a6511f3b979"], "ip": "46[.]166[.]161[.]71"}, {"hashes": ["615fc8c480e5af715b5128a0c83b3833bb93ff20564fab054f4f05bf3a8e6ecf"], "ip": "198[.]144[.]158[.]13"}, {"hashes": ["295425edde4859bb1a5cf81614133be823e0a1cce960d65a85c0e87a063f25a7"], "ip": "184[.]22[.]201[.]27"}, {"hashes": ["3a2a009d7b6b0deca283bed62e5b03041b10987d1d855860d790c33c8f301103"], "ip": "83[.]117[.]150[.]30"}, {"hashes": ["5d2725afb59f0065eeadbfbab91ff8df8ea29f90bc09a8d7f233e258def7b507"], "ip": "91[.]236[.]116[.]131"}, {"hashes": ["8b5c059a2ce1396d8b3d847d091e0f58dfd345ebef38703e3fbc4072214bc633"], "ip": "46[.]244[.]10[.]195"}, {"hashes": ["6903ad411a038c8d187ace655a3a84cd02df36c94efc50e3c7c40a802b3479bb"], "ip": "193[.]0[.]200[.]137"}, {"hashes": ["7c2c346a0aeca305582db0ad90eb68a3e946bbcfcc881aa1ed8e60b648b824f3"], "ip": "93[.]174[.]89[.]27"}, {"hashes": ["7bbba7243370a16754b468ca09ddc57dcaacd242c41a1f658c1c74f68f4cd011"], "ip": "89[.]158[.]168[.]24"}, {"hashes": ["7bbba7243370a16754b468ca09ddc57dcaacd242c41a1f658c1c74f68f4cd011"], "ip": "81[.]64[.]55[.]158"}, {"hashes": ["7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46"], "ip": "185[.]56[.]80[.]174"}, {"hashes": ["aef0c250f81c91b01e91382a6406019445947b2c0efa655e8c3bdf410c310b3e"], "ip": "192[.]3[.]24[.]139"}, {"hashes": ["a3e935108d6f64d3212ea1abcb1f4aa250e248a3b6f70fda91e73dafdf02e1ef"], "ip": "46[.]183[.]221[.]102"}, {"hashes": ["ca5f3246e0262734e3eed9c745005abe1bec3ba947e26a2ae4635743f61e5ef6"], "ip": "124[.]248[.]212[.]118"}, {"hashes": ["ce9f3ef57bdf35724e94bb71c7141b2b41e7815c62ebe6973b7736a64c2d88c0"], "ip": "185[.]17[.]1[.]237"}, {"hashes": ["f825ce94d496b674ebd22aff3b27068409a686860920917d5f07ca85fa57f0fe"], "ip": "68[.]103[.]247[.]174"}, {"hashes": ["dea6534260b7712c4d33663673f3f975848c8d59da925f7d7661f3e965c95d39"], "ip": "82[.]156[.]138[.]119"}, {"hashes": ["d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414"], "ip": "50[.]18[.]157[.]62"}, {"hashes": ["fb9952d3febeaee18bd520615fceb1dc7cd3f9226183b35819c1b1df9e8987eb"], "ip": "37[.]48[.]80[.]171"}, {"hashes": ["ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658"], "ip": "88[.]198[.]36[.]76"}, {"hashes": ["fd769ad0be242ad1b3eea869899b398ef8ad8f6456b53f44ad8b84de41a20b93"], "ip": "68[.]103[.]247[.]230"}, {"hashes": ["0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b"], "ip": "173[.]194[.]68[.]94/31"}], "mutex": [{"hashes": ["010c2634c83245bf226b4ad088baafb734c8adf615333e66785dec1ef0c342ac", "018df234f9071560f0e224161a7a81a76ab3c91b4c0d01b5393e0b6cc0a2267d", "03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "09992a21794de79dce09934282686a28e210937c298034e3fec29ccc8d381f5d", "0c9bb94250cd22b55ebb209747362046994a7903b41eb3010d3e47b8ea93607b", "0fca46b7d77046cb9bf84271f8ea678f8f950bc7ebc81ac7e2c5afd3e96f41c3", "0ffd27947317c077517b9a8d6dc462341337a60ee4331e299ce1a78e1df2a7a7", "19814a08bf18ae10977666476850e0d2e6a652666ee8345d45f1c774097bca34", "19a13704dda9b585574a1cd18997861ecb2e45232fa3c26670df6aae48ac00ea", "1aadc7110ccec580e14a938e45dcce5e583532fa98da1393cb79d6d33f94c6fc", "1cc7bd0a6e3d5f9221307c74e796d5d56217e69aaae6ea9a84117bc42e3a1b6d", "200b533aebbebab905394591611188adabfd9c89d8de905eaee95aeda31de7bb", "25648f567f9865e1a00276428938a4702fc3328d6b4d6418a26d7cf42d4dc72d", "25e09b45bb5e50ae43c920db37dcbe9574f7249903eaa8673cd67dff35173b1b", "26e2a9a787068682eca68063ddf49552f43dca8c3a92bf0c8d5e408a6b4c75de", "28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "295425edde4859bb1a5cf81614133be823e0a1cce960d65a85c0e87a063f25a7", "29eb910127a75e64eb4e3bac0600ab069bdfa9c19f63bc672eadb6dbeb612781", "34a0735b0962924cc25b2cfb2f5e5e8feac51449b5757c0a919bb8b762aa7cb1", "358059151e8f2c9aa713d55ef0edc27e91254370b26ab3142f0473a7efd26f2f", "361a59b9b0e7542b37f25500b23e2d6d72fac06dfefe44bb2c9d2e2f436ee0d4", "39da2b6d41d7d608684a3b65a6e96a804fa73017b2b9c63d66d7cd573e35017a", "3a2a009d7b6b0deca283bed62e5b03041b10987d1d855860d790c33c8f301103", "42c0620e9bb9b9aa1bd5bb657b4ca8ad99ef33997e4897d2ff1f3a6511f3b979", "4445fa5e8a93b54c573b5311e6aaecd6c10704f5666724b83e07c97e9df98e03", "4b7e741c3ea4aa8c3eec69187021195a573f51cd1bfb54df102240458a6bd35b", "4c8f5d0f1fb6e10fe4bdcdd8c0b8570979ef140fa6aee4fd9f5d77f872ccb53d", "52180b4e88f78cbe2363780aeb91629e20d7039fa09aa7e8d17a381d32e17a35", "5677d97e3f04fef3be67639b26933d0acbd16cc8df8f63a9251ce414a26311ae", "5ab0e9e604de1127576e0167ffe99ce3e45c09b8a64d49734cadb22675dda933", "5ba91eb9d133240730ca6ad726a6c6119680b6c4111b4add99c4719236ebb97c", "5d8e213d802bd768b076278d378f355c00d6bf8267e6ef166d5f0be145f3ae22", "63a8a02c5e4ffeb300b082039d49ff3d07735dca54a364f9a12c201b30f6c1c0", "64a585c19efc442e08895a6335f02c83fe1a234c1ca1f13c4351e5116d204d47", "6637de309b22843459589f984e1cebc837f09711ff0ea05693e88c0386daf9f3", "689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "69617a7be35ebdb3a69950393f29e0c634269d73458c6783d7e4bb80812e1e11", "6fd9ea099ff1bbc5aca328f552976691904b1cdef715a45d337d5de74d2b2dbe", "74dc13efc07d7be373dbb4c64569cc09e4b036b338b38d2320649c93dfcd1f26", "76f0c1d6d87838120db41aa5e99f2a78bff89dd647e6350683fdf6cd572d6f92", "77f225768627be1d595fa264b90abe417c19e28ffeb56c9059009eb33b3b2aab", "780e36d5f35979acdf18c1ab74cbcaf57af77991ff44c6e6a94afed72e4010d1", "7bbba7243370a16754b468ca09ddc57dcaacd242c41a1f658c1c74f68f4cd011", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7", "82639cd516bae15fd61a4ab871474725a0dcb788382f1ed97fe12fd960cf1984", "826edc2b13dd7bcd1fa052f2532764a01b67a56b184e44b1cd9ac3dc9e9427d9", "839726ba01e4dc3f905019d22603fea137fca1a1abad9d88a9b892e61d7140be", "8417baacd5e3333a2a3515b74b384ec4f0e663fabea7ab01234c264e206219ac", "87e85e9b19d8b43c5b57bad9a78c0eb01ca4a468d98930117cea2c8afd1b5c46", "88df75ba914288df8c68a96d47219c41e46268cdfaff602101962562f2939038", "89a6e6eaf428993c57ec2a00463e535822b9824064e5fc7e3fadff6a482f2a07", "8e824e532d125fde397042e998106d836fc84ab91016801663349b608b7046cd", "982e76ac1072e45b79365d91ef3d8db146147f2cf407fe536e1c95f0facd7abf", "9ac13bc3454777a00e161c52a0f3987fdf663af98e00c790c60a03744542db00", "9ff59973fef56f55e0bc82734791278767cde8e7ea7b4e4dd43b7d71a0262152", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2", "a3e935108d6f64d3212ea1abcb1f4aa250e248a3b6f70fda91e73dafdf02e1ef", "a4df9670682b4954fd8d930c7b6d9e94a702fb35797114756172cacc59fcd7b5", "aba81b87eadb02f92765aa32c1d0cdf8f5b45a5dcea96cc6cc62ed401047849a", "aef0c250f81c91b01e91382a6406019445947b2c0efa655e8c3bdf410c310b3e", "afb9ad4fd7c8d8ca5444e51145ece82dd57a6d6a6308a8fa7a993b3b52d48502", "b096b8b68fe1bfdf985b6af14e8d0628c6741c284587a4ad0184d2227a94efbd", "b544209104b1197945d6dc5df29ff2dcc55f551510a1c0a7a792d5c00be208df", "bcd926f8b9190368c98b05ce0ce1451faa1889a315514a145aef44e6f4e6aa5f", "c0b7f109fb212c3f99174dafb798ccf68ec0f5ea8e06dceb2f029b343ba6c464", "c1de25611d468adfee92b33fc4bcca8ead1d20fa97064848f2dbe734f00a1551", "c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "ca5f3246e0262734e3eed9c745005abe1bec3ba947e26a2ae4635743f61e5ef6", "cb4d6590e36036326081e8577415df81b374816287a6bd10e631eab879afb786", "d168585076a0f303b27a772eb61e71da67494848d017c8f9934a6dd48900d4c9", "d1fd4a5af8fe4b10eeecfbef6a8ff2c200b9961991b69eb929fe371bca3210f7", "d30d242cef6e43d55a1ad0290d72a53725bb47c8abb1f317513e732c1889d293", "d516d079c77db087484711c2ac4239b571f51a0b39651b31da3ac511a782ea5b", "d69df4933a14f433846865d1d2fd1650e9ad639ec9802d3f891c4545d9c4641b", "dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33", "dea6534260b7712c4d33663673f3f975848c8d59da925f7d7661f3e965c95d39", "df5e2415f745d0a73f06a085b1af7389a5b86b443a97dc9711a2164852f615d2", "e017c16a756bfe5daceb232a34981b7453dd12661cb60adf8cc42a1fdbb9b820", "e0e0d655855d1a4d29c386f2cf9a2c76fd77eab00450371573efbaa9abb8edc0", "e1b8825f8805f96a8ae782df4d2171343c1579fc38bde11ce60eb5a64f914264", "e2f2ca3e181029002e0b38fc441b4ec9ee1745e1a04b8f442bf80fcde3a99e30", "e3cee0b56013a45761eb660a3af8bbcd892918446c2ea1529cb04165355b1438", "e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea", "e9484c9f70fa078f2926611b72b8bae182a79673443b6d4b8526c909eac7027a", "e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d", "ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658", "eb08b761e4d8bdecb102eb3d3dca8f9f1ced1baf74edd63eded08e08e12715b5", "eca26347d18fc60c8263c83e8f048ee4032b447a12e729201c4fc37750b50561", "eccdf3912abbe3611e77c9316bd8046ca16a1fa9c97c4e0813f6e0ccfbecf71a", "f2c0d0232b0ead1fa6a64410360142f053845e387b9fe085e21b2daf84e8448a", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3", "f37c17a7e5489bc65f7820c87e53940879689e73f506a36a7f4adb74f90bd665", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb", "f90c3613bea3064ea8a8da53d246f9b799cd5678e09e7ab2f74f3da40b0b6a8d", "f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae", "fa49929b34f937e401c979694a0694391fa1245bbeac800c101dee8cc70657d7", "fb9952d3febeaee18bd520615fceb1dc7cd3f9226183b35819c1b1df9e8987eb", "fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355", "fec8f111413ce9e7f2c6ceee5c5e204ef45f83f26741084f492c1a475ce76507", "ffaa5dee2950e74958ae5063c804c26c1913bfeafee62e72b45675cc1c9573ea"], "name": "-"}, {"hashes": ["020116ae5b985aee52a6bd8800f8ad3b98f55da90c3f54d93be1313d25fb45a8", "03c04df03ac5723c680d619ac239f7b5f228f0cedc0d1669356e74772a4bcdf9", "0490933dc6938a8310b10f6da69f56670f875b27c66168d4a9ef7aba3978f8db", "0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "1269855d8a83079231d8f28b867f3e5ac285c1f14689bb5a2dba0873a06c73cf", "194c749c1235b74350e0d2f23c87306bcaad5eff06710fe26e6121c77520aedb", "19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "1e1b15f8ca93c05fd793ea3db2196b0535b513e048437f213350a31d4111ebd4", "205fb4188ae904891e4e63924ad239341b8e7a7161a25e869fcfc94c6fc9ed9f", "208cd4d94a662ef23e1e195ac75c1b2e96e1070999ff7bdb2949c232b94c9fae", "229725b0df3d62cbaa721743038ca14a62c2901c76ef178c4fce177e2b1a61eb", "23ab9c13faf1997bf1ab6f3c94012e2b16cb08c3082c553bcdb4cf1befd798c2", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "25662ae58579903a9f7191dc292dd4c1493bed3aff64f2bf426071c570846111", "2bf6fa46cccbbf76977c66a591d5d1633806627157fc68e3e339b22d9c2bc634", "336b5de87a7ab7ff1f91084929babf7f339dcf53ba53ec5d441f50cceefeebb8", "33ddbe18d24cb476ae6da712876cb6fd530f49ecc5a82568c7058f2a888c1af3", "33e97a81942a38074b52455b4b376709bca812ad3c0168ece5d0469070f8a156", "39a3a57c77e7332c30d2c1a3f28b4643365cdad4b4d1e928d810c1d5f9d6bc60", "3ad26f49f303568acb0fd6a6076d2fa6853f940484ebd3bf17df6b7b36fc29a2", "3ae4ea2358692ab05568784c2e3845f80fb05df0a95aa87f073bb210fa403c2f", "3b6451d837756433e318f1f115ebef1b354f0222e3d37efe39d186cb7e2bcf9a", "3d8ccb9a43b60d06f67415588321cd66c9b4df7100fbfe6744de6fbdb926ecb8", "3ed2076861807f26d768d22864923cdfa62f2173151808ddf3cbd895b322a988", "3f61edd95507f9e795f2cb6bc47bc50b58d32f76f82b008b0cda3cab0a918e5f", "43ab08e76b4df950fd780fe614d4af868cb36eea6b2b2fb1e144424cd73451db", "448ae845bcdeb6cedcce02433ffe6f5787a9c18f7da19007d45c1d60395b3eee", "487d3eeba781e1f1b4cb025cf0c42e3d180376cf310089ae9496ebe152930335", "4d703eae8df7306aec8f80da2ba59f1954dfbd0226af1f376f14dd73b49bd9fa", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "5b67d613715c49faef5a392e752d54d8ffecd4c84ca6d0da50dd05f6725a4228", "5d2725afb59f0065eeadbfbab91ff8df8ea29f90bc09a8d7f233e258def7b507", "604e37eae79a7f23a8f38228453d331110567fe04bdf4db59d6d0b5a69688350", "615fc8c480e5af715b5128a0c83b3833bb93ff20564fab054f4f05bf3a8e6ecf", "61cff4203b1839448f7316db245268783b1a55c1047d321dab405e43658622fe", "6517e91138ccfa4d5f8d1fd751b0493b4cea20e6c89323d2341aa1ad28247525", "666054adc9e5b63a6e4cdbc1276759778fb70b67e5f67dbd98615c320dbf3458", "6903ad411a038c8d187ace655a3a84cd02df36c94efc50e3c7c40a802b3479bb", "6a0e7c5f67289e86bf83618c3be2ef20f214361c25bf25e4b86c07bf072bca72", "6b44c772bac7cc958b1b4535f02a584fc3a55377a3e7f4cc7eeb5a4ba99b0ead", "72277fe0db56751716d039a9d259f99cd399162b7b1f05627d476916a529810b", "75778a79212021ccf302b31ac59a2549b93765d7316885cf76cb6f92973bd026", "7b08b4f8bda77743671f31890187f6d0cc5fae4d6ddd792855a4041728c70f46", "7b4a704848caed9792d5b26844b8c186ba8716de11c9424dd7d3278bc3f7569b", "7c2c346a0aeca305582db0ad90eb68a3e946bbcfcc881aa1ed8e60b648b824f3", "827491bdd16bdf2c2e7d95b9dcdfa6e47179221937ce62e16207581b02a86212", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e", "847402e2118ecf46ed0983b0be0068699a127e457ace077c285ff1de006ade29", "860468d7cf01b4e534685acb164b6137763007583eee4e6f656550eacb8318f2", "8b38deaf4ecea02607017a82b29a42d6bc59a5a74bbc51d80868bb083a46f3ec", "8b5c059a2ce1396d8b3d847d091e0f58dfd345ebef38703e3fbc4072214bc633", "8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "8c312d6552b94a50153a74596f1354b3b08b4be138eb5a8ef7e1577bf0ddd2aa", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "9479ddd7478cb6bda8846fd4b67f13df1abeb82688af2b1bc5cee546dd608f4e", "97b2c83187132c1133faf381de11d2110b9b6ac2390e4683e8fa4548d17e4886", "9820270b04e427e127e46462f7aba602b8b615b67694e5dfe177d0cda47ce99a", "9f0bd1122ebe8f64f2dbec4cc78916f6603fcbf2c92c207bbf31ef2a849ef43e", "a126251f0b57b983b9954ab08309d91da45eab5bb7b7b628561bc2778ae4fb39", "a24e2451dc0a22c17ce5023ed5bbc0a4df48280513eee33f6efecd40e3233e2b", "a6077fbfc394ad6ee4f4aa010dcdc2a7f0a1e2923a6777328f210541708b6cf3", "aa5832171b277bda842adad304b8ff63700a5124662652c289c80361339de596", "abc97945448ef860295bdc9e031061a06e5898d65fad3358a8c19854975dc54b", "adb948bdb226b0402f6560de38894d19d8678340e76d6377079710a1e730b0a3", "b1000f4de567d62a912ae0565a7b66a28032e51c4bd14a3761c466e50b76eee3", "b430ab1afc17c62c724f993f312365dddf14dbb01f23245bf3d7fe717d59ac1b", "bdf9e3ed3ea2d35a2b1c290d0410ff16575c0b67a7b0284012afdeecd7aed92f", "c2214ab7a56324aed5d582bb6708eed653dc983413a1b86f1ac357b690005ebc", "c26660a82fc9170dd1bf924dcc5518c3af0defd53e5674addd212a3c10ab6081", "c347c5b0bd7a420a08a0fe6a723f755a722ca3b30f613df6211af878c1e3da41", "ce9f3ef57bdf35724e94bb71c7141b2b41e7815c62ebe6973b7736a64c2d88c0", "d35768cb1f3f2ba864206a1ca8dd7e442ac0d8d0ab8350c6b625af4690c94eb5", "d3659f9d3802c74e245cec75adfa2287676745e13acfa1b075f970845456ff0b", "d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414", "d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6", "d7f839290254fb293f49112c2cf21302d502501b81e42cb8938907ac84bc19b4", "dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837", "de9779466f60e2901e42e7f10f5277bd2763e8940f5f03e7b7347a6ac7d65459", "e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add", "e3a9e85263b1e24e5acaa65d7ac6997dededd9665769b1315cfd77ea42cf7c13", "e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2", "eb82e46351c01e2130bc9b5ca66adb7dc271612a9a78f47badf3b0ba928d0b43", "eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8", "ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599", "f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b", "f43d9209f66b8ffa803c0621b9633b7d744f6926c016b842d451d77def6377cb", "f825ce94d496b674ebd22aff3b27068409a686860920917d5f07ca85fa57f0fe", "fd769ad0be242ad1b3eea869899b398ef8ad8f6456b53f44ad8b84de41a20b93", "fd92f13415fb0b5a432a17c3fa8a84dcee72c05ec44436cd21f6112710225caf", "ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "name": "<random, matching [a-zA-Z0-9]{5,9}>"}, {"hashes": ["709b5ff054c6b6b7fbc3ef3df37b0e0fa592cfb425653db7418d65696ee66dd8", "ce21c280755d780f2c7eb8c463def5465e66c6a152e82f51fdf9488290767482"], "name": "f\u201e\u00e8\u0152J\u00c2\u00dc\u00f8"}, {"hashes": ["8b10a123e5ce9b1d44739c9afca499c4e6c632b48f38395d91a803b9c604f622"], "name": "\u00ea\u0018\u00e5]\u001d\u00b2\u00b8\u00a4"}], "registry": [{"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee", "5306f19e60e74194ae5b3a23892dc0dd53a355bdc1718f95720b8c295bea7104", "842f71b44ff1f52654119961a859d843f84782e9f57d1c5a8f4544bda5d31d3e"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Google Chrome \u00ae"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{PFD888J8-2MA5-M2T1-QRF4-66B3AGM2UJTB}", "value_name": null}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "615fc8c480e5af715b5128a0c83b3833bb93ff20564fab054f4f05bf3a8e6ecf"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Google"}, {"hashes": ["8b7b284a76d779aa7668e8c8ca5998a0fdcbd2326368e18cc106787cf4ed58c0", "91afc4c4e789f4737054f888635a00e6b245f8f9dc68544e548b6e8bc5fc883a", "e070d7c6041b109c110e6e76c74c8ba81949b827ecaf31573c685cdaab1f0add"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "crsss"}, {"hashes": ["0c798721a5b3f88c18074088495d5c44aaf5de61ebf9bbf1def6bdb7ee39680d", "24f25633dbfa78308d3b6467c48d9a6c28eb14b79b79c517eda71d359562b64d", "de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{PFD888J8-2MA5-M2T1-QRF4-66B3AGM2UJTB}", "value_name": "StubPath"}, {"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{4OOD3SLU-1H77-1W64-FXF7-2OBEY2TA6336}", "value_name": null}, {"hashes": ["19b24c39279fd62f088b075dd118ee52aa3c05421605435b4b77e90cf05ec3d3", "24d9d442c0f550a7c14a3ca08884ba8309410c248414de3bb9ebe1fb57eae0ee"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{4OOD3SLU-1H77-1W64-FXF7-2OBEY2TA6336}", "value_name": "StubPath"}, {"hashes": ["03e4458d18c8271fe9d6897c2430116cbca0b4a831da0577e527d6f7f89fe503", "7f75e0aeef8391703954e9e5b054cbbcc1c98f51d4392720ee97ad010e1bf2b7"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{YPKM6NA0-5101-UXX3-2URL-438R8JQ2I7W5}", "value_name": null}, {"hashes": ["689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{E65M024V-7LD5-8SW6-20OX-S56I02BYG2W6}", "value_name": null}, {"hashes": ["689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "AdobeRX0"}, {"hashes": ["689268486bdb4c28b5852281d597666ffae220e5848d3c3edef0ecd577e260f4", "a1bb9df1d1d80b20eeab8f237260b921e7e2de86cf5ff984f515f0ef47c0e5e2"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{E65M024V-7LD5-8SW6-20OX-S56I02BYG2W6}", "value_name": "StubPath"}, {"hashes": ["28f62498fc78661a59c19a16dcaada2aab58c4533f753f12e515f5c37ba28240", "f705d995a8d348d1c053bace3aa4be3f4e96b9001fa322ce167b956fd01a0dcb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Windows Defender"}, {"hashes": ["780e36d5f35979acdf18c1ab74cbcaf57af77991ff44c6e6a94afed72e4010d1", "826edc2b13dd7bcd1fa052f2532764a01b67a56b184e44b1cd9ac3dc9e9427d9"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{R05YIYX2-V032-65C5-060Y-IOS52WT081E5}", "value_name": null}, {"hashes": ["c77976430185e5f04e7bbe159fd7dd1df7e051aee9edf6993a06c961a17fe8ac", "f33478747bc7e5f1d450fbdb40ac552cb1692e480397a41551b94c1a483332c3"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{4S8WYDXY-B1CG-NO66-FMVM-72C8WXM156GP}", "value_name": null}, {"hashes": ["dca33f57e1080be8abc89c1688e634c241900265051ba257bef610031f174ebd", "f1ff0ed0737fa5e21aa5fd34b2b4b4407ef67d2fd219f498bb13e8964e948d8b"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{OB8V6U3R-X123-SYUA-116E-4UF6HJ3K8EB0}", "value_name": null}, {"hashes": ["fde3f4b6fd4d2f7a5fc8e92799035c740019dcfb43b314135a6e0f434782e355"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{68U63KX2-4150-PO37-0R2D-6J8SU5HHBNX5}", "value_name": "StubPath"}, {"hashes": ["d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{J425YD62-7024-1X6Q-J4RN-37P4YVF5708X}", "value_name": null}, {"hashes": ["d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "SophosScan"}, {"hashes": ["d5c7acf75fca8d8d1609dbcc6254b770483da5a9878490ebd312c0e5813bd414"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{J425YD62-7024-1X6Q-J4RN-37P4YVF5708X}", "value_name": "StubPath"}, {"hashes": ["e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{46X25B7E-T07O-4IM1-60R4-MKJVT8VOY724}", "value_name": null}, {"hashes": ["e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "AdobeXR0"}, {"hashes": ["e61d4ad017e76cbbae1522bea88b89197320f2ab32d10d81f8a1421f0fb594ea"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{46X25B7E-T07O-4IM1-60R4-MKJVT8VOY724}", "value_name": "StubPath"}, {"hashes": ["e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{DUOUPKL7-57QL-PLK0-02M8-NX2N0VX0AK32}", "value_name": null}, {"hashes": ["e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Local"}, {"hashes": ["e0706551c3aec0947531356f825b92ed357e0672befdb45006a883cc2d1be728"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{DUOUPKL7-57QL-PLK0-02M8-NX2N0VX0AK32}", "value_name": "StubPath"}, {"hashes": ["eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{2Y0W54I3-5J64-3SN6-643F-FG66I7NB1335}", "value_name": null}, {"hashes": ["eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "MS Sounds"}, {"hashes": ["eede585a0a78b4b9663df630babbb6f3a5e591a0aa71a0a100c9ef85b3d982d8"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{2Y0W54I3-5J64-3SN6-643F-FG66I7NB1335}", "value_name": "StubPath"}, {"hashes": ["ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{6QNA86Q6-1WB1-5552-0KGY-02107H8NTD02}", "value_name": null}, {"hashes": ["ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "micro"}, {"hashes": ["ea368677e9bc34d6a4154314ac3ed81bf6143a77d33b7c0a65db0e7024699658"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{6QNA86Q6-1WB1-5552-0KGY-02107H8NTD02}", "value_name": "StubPath"}, {"hashes": ["de64ccc1bdb4b3d3f18fccf6405a1d7411c6e0893cfbd48109cf563037cd0837"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Google_Chrome"}, {"hashes": ["e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{0MX886BH-VHU1-W281-6873-0K88375430LT}", "value_name": null}, {"hashes": ["e9887a349d929d4a2104f129f9f74d8281a8e4a9379d6bb44ef86080f805a56d"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{0MX886BH-VHU1-W281-6873-0K88375430LT}", "value_name": "StubPath"}, {"hashes": ["ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{VP2312QC-1827-OX01-6XU7-Q5TPJQU038W6}", "value_name": null}, {"hashes": ["ef149e1c56ca2a43a1a13cc98ac7a9c6b89639ea02f49e79c389a1f0a8031599"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{VP2312QC-1827-OX01-6XU7-Q5TPJQU038W6}", "value_name": "StubPath"}, {"hashes": ["e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{3D64D26Q-732M-57FF-5QQB-A633DI5FIF36}", "value_name": null}, {"hashes": ["e9c3ee481ec43c32e05b36790bd067f67cf07c06a923f9c5d276d2b216bf64e2"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{3D64D26Q-732M-57FF-5QQB-A633DI5FIF36}", "value_name": "StubPath"}, {"hashes": ["f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{WVW56G5A-MNHC-J302-3SBU-AA34HFSY7HAK}", "value_name": null}, {"hashes": ["f9c838b012fd7d38476f772b0ed99500f02c9fcded63745f5e2206d9538183ae"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{WVW56G5A-MNHC-J302-3SBU-AA34HFSY7HAK}", "value_name": "StubPath"}, {"hashes": ["d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{3G56BGGQ-15U3-24K3-640A-2N6B42RM2JY3}", "value_name": null}, {"hashes": ["d6293e7d476ea578c4a60b04590720b00dd03adeec6e48a41c0d13e3e53a5cd6"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{3G56BGGQ-15U3-24K3-640A-2N6B42RM2JY3}", "value_name": "StubPath"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{RSYATK18-SFHP-1FU4-SW07-T1201W27DE3E}", "value_name": null}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Server"}, {"hashes": ["ff49d50a31141eb40aca753dc30ab13f74d6fae7dafee8b0893140cb0d0171b4"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{RSYATK18-SFHP-1FU4-SW07-T1201W27DE3E}", "value_name": "StubPath"}, {"hashes": ["f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{XGIDG7NB-1BJ0-J12L-G7E2-IO5Q6J54IUH5}", "value_name": null}, {"hashes": ["f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Flash Updater"}, {"hashes": ["f0c15349e8b11644d6da7cc172469fe178342421280da41fcb6ad97c53b80603"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{XGIDG7NB-1BJ0-J12L-G7E2-IO5Q6J54IUH5}", "value_name": "StubPath"}, {"hashes": ["dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{OT87RP24-14U4-U15T-5XW0-085JGB6MBCQ1}", "value_name": null}, {"hashes": ["dc003a63a3c32ebe624e29d5b500c9678de87819dd6129f9dcf3d23ddd6e5f33"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS\\{OT87RP24-14U4-U15T-5XW0-085JGB6MBCQ1}", "value_name": "StubPath"}]}, "reports_count": 212}, "Win.Malware.Ramnit-9783386-0": {"bis": [{"bi": "antivirus-service-flagged-artifact", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "d175d915cabf5defc14737d0c6b30d9acdb16a20ecb644d3ba2593bec1d1df18", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "d175d915cabf5defc14737d0c6b30d9acdb16a20ecb644d3ba2593bec1d1df18", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "d175d915cabf5defc14737d0c6b30d9acdb16a20ecb644d3ba2593bec1d1df18", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "artifact-flagged-vm", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "d175d915cabf5defc14737d0c6b30d9acdb16a20ecb644d3ba2593bec1d1df18", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "d175d915cabf5defc14737d0c6b30d9acdb16a20ecb644d3ba2593bec1d1df18", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-file-in-user-dir", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "nginx-webserver-detected", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "process-long-cmdline", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-snort-protocol", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "network-private-ip-address", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "rfc1918-ipaddress-detected", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "public-ip-address-identification-attempt", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "url-short-service", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0011", "TA0005", "T1102"]}, {"bi": "modified-executable", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "pe-packed-upx", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-http-numeric-ip", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0011", "TA0005", "T1071"]}, {"bi": "network-communications-http-post", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0011", "TA0010", "T1048"]}, {"bi": "network-downloaded-executable", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-snort-file-exe", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "file-ini-read", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "potential-registry-persistence", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "process-with-multiple-children", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005"]}, {"bi": "pe-imports-toolhelp", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "artifact-nullsoft-installer", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0002", "T1072"]}, {"bi": "excessive-file-modifications", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "file-ini-modified", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003"]}, {"bi": "deleted-executable-in-program-dir", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "process-requested-direct-io", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0007", "TA0005", "T1120", "T1006"]}, {"bi": "html-small-file-redirect", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "double-url-detected", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0011", "TA0010", "T1102"]}, {"bi": "pe-encrypted-section", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-snort-file-generic", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "feed-domain-rat", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "network-file-downloaded-to-disk", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "registry-app-path-created", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003", "T1034"]}, {"bi": "startup-folder-modification", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "pe-invalid-checksum", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d175d915cabf5defc14737d0c6b30d9acdb16a20ecb644d3ba2593bec1d1df18", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-shell-default-file-handler-created", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003", "T1112"]}, {"bi": "file-handler-registration", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003", "T1042"]}, {"bi": "pe-filename-mismatch", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "js-uses-eval", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-artifact-invalid-certificate-signature", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005"]}, {"bi": "artifact-flagged-obfuscation", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "feed-domain-banking", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": []}, {"bi": "network-downloaded-antivirus-flagged", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": []}, {"bi": "js-uses-fromcharcode", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "js-contains-massive-strings", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "js-in-html-calls-activex-object", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-ramnit", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "pe-uses-armadillo", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "http-response-client-error", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "mitre_attack_tags": []}, {"bi": "pe-subtype-com", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "pe-imports-psapi-dll", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av-signed", "hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-russian", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-imports-exe", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-antianalysis", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-writable", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "suspicious-nullsoft-installer", "hashes": ["d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "TA0002", "T1064"]}, {"bi": "registry-service-with-autostart-created", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003", "T1112", "T1058"]}, {"bi": "currentcontrolset-service-added", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0002", "TA0003", "T1035", "T1060"]}, {"bi": "dns-excessive-domain-queries", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "service-dll-registration", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003", "T1050"]}, {"bi": "lnk-no-creation-date", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0002", "T1064"]}, {"bi": "windows-util-dll-injection-tool", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1121"]}, {"bi": "registry-autorun-key-modified", "hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "script-contains-url", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "registered-com-server", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "mitre_attack_tags": ["TA0002", "T1106"]}, {"bi": "pe-section-shared", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-tls-callback", "hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "html-js-uses-window-open", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "html-js-uses-location-replace", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "mitre_attack_tags": ["TA0001", "T1189"]}, {"bi": "artifact-multiple-extensions", "hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-modification-reg", "hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "mitre_attack_tags": []}, {"bi": "browser-helper-object-registered", "hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795"], "mitre_attack_tags": ["TA0003", "T1176"]}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Ramnit is a banking trojan that monitors web browser activity on an infected machine and collects login information from financial websites. It also has the ability to steal browser cookies and attempts to hide from popular antivirus software.", "hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d175d915cabf5defc14737d0c6b30d9acdb16a20ecb644d3ba2593bec1d1df18", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "iocs": {"domain": [{"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "host": "pv[.]sohu[.]com"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "host": "t[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "host": "int[.]dpool[.]sina[.]com[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "config[.]i[.]duba[.]net"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "infoc0[.]duba[.]net"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "ww3[.]sinaimg[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "ww4[.]sinaimg[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "ww2[.]sinaimg[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "cd001[.]www[.]duba[.]net"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "center[.]rising[.]com[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "ww1[.]sinaimg[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "host": "rsup10[.]rising[.]com[.]cn"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "master[.]etl[.]desktop[.]qq[.]com"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "c[.]pc[.]qq[.]com"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "image2[.]juezhao123[.]com"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "dlied6[.]qq[.]com"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "image[.]juezhao123[.]com"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "www[.]w8602[.]com"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "www[.]w5win[.]com"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "www[.]w8632[.]com"}, {"hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "www[.]2345[.]com"}, {"hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "ie[.]2345[.]com"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795"], "host": "www[.]sohu[.]com"}, {"hashes": ["f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "host": "f7usa[.]a[.]sohu[.]com"}, {"hashes": ["99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "host": "www[.]xiaoheiban[.]cn"}, {"hashes": ["f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "host": "i[.]int[.]dpool[.]sina[.]com[.]cn"}], "file": [{"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RAV.cfg"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RAV.cfg.tmp"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\Auto.ini"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscfg\\rscfg.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscfg\\rscfg.xml"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\Proccom.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\Proccomm.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\RsBaseNetWrapper.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\cnt08.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\cnt09.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\moncom08.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\rscomm.xml"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\rscommx2.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\rssqlite.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rscomm\\syslay.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdinfo.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\comx3.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\dfw.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\procenv.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\rscom.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\rsdk.xml"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\rsxml3a.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\rsxml3w.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsdk\\traywnd.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rslang.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmginfo.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\adefmon.mond"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\antipromotionmon.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\bacore.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\bawhite.dat"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\bawhite.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\defmon.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\monrule.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\rsmondef.xml"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\selfmon.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\rsmondef\\x64\\adefmon.mond"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\setup.dat"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\syslay.dll"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\ui\\snin.htm"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\update.xml"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\RsdSfxTmp\\updater.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\kantivirus\\kinst.log"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\SoHuVA_4.2.0.16-c204900003-ng-nti-tp-s-x.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\install1078565.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\kinst_1_329.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\ns<random, matching '[a-z][A-F0-9]{1,4}'>.tmp"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\KeLe2014Beta3.6.2Promote0326_20090195130.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "path": "%TEMP%\\ns<random, matching '[a-z][A-F0-9]{4}'>.tmp\\System.dll"}], "ip": [{"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "ip": "47[.]246[.]24[.]228/30"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "ip": "211[.]159[.]130[.]104/30"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "ip": "104[.]254[.]66[.]40"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "ip": "203[.]107[.]55[.]116"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465"], "ip": "47[.]246[.]24[.]225"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "211[.]103[.]159[.]80"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "106[.]120[.]154[.]163"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "106[.]120[.]154[.]174"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "104[.]254[.]66[.]16"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465"], "ip": "47[.]246[.]24[.]226/31"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "47[.]246[.]25[.]228/30"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "221[.]204[.]165[.]208/31"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465"], "ip": "120[.]55[.]104[.]133"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "157[.]185[.]146[.]132"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "106[.]120[.]154[.]110/31"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840"], "ip": "183[.]146[.]18[.]238/31"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "183[.]146[.]18[.]240/30"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "106[.]120[.]154[.]112"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "47[.]246[.]25[.]226/31"}, {"hashes": ["3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40"], "ip": "47[.]246[.]24[.]232"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "58[.]251[.]106[.]185"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "121[.]43[.]19[.]225"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "47[.]246[.]25[.]232"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "104[.]222[.]251[.]101"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "110[.]43[.]84[.]181"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "203[.]205[.]253[.]140"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5"], "ip": "111[.]230[.]117[.]40"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "47[.]246[.]25[.]225"}, {"hashes": ["8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "119[.]28[.]164[.]149"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "ip": "119[.]29[.]47[.]96"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "ip": "180[.]97[.]200[.]29"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "221[.]204[.]165[.]207"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "ip": "193[.]112[.]237[.]121"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8"], "ip": "106[.]120[.]154[.]165"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "ip": "123[.]125[.]123[.]17"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "111[.]202[.]126[.]20"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40"], "ip": "183[.]131[.]211[.]250"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40"], "ip": "221[.]204[.]165[.]196"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5"], "ip": "111[.]202[.]126[.]160/31"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5"], "ip": "123[.]125[.]123[.]18/31"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "ip": "183[.]131[.]211[.]242/31"}, {"hashes": ["86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465"], "ip": "183[.]131[.]211[.]244/31"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795"], "ip": "111[.]231[.]131[.]16"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795"], "ip": "39[.]106[.]131[.]132"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795"], "ip": "116[.]211[.]198[.]129"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795"], "ip": "36[.]110[.]185[.]63"}, {"hashes": ["1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795"], "ip": "171[.]84[.]4[.]11"}, {"hashes": ["99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "ip": "220[.]181[.]90[.]43"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5"], "ip": "221[.]204[.]165[.]202"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84"], "ip": "183[.]146[.]18[.]248"}], "mutex": [{"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\Global\\CfgDll.dll_MUTEX_WRITE_MEM_Rav_Formal11"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\Load_Shared_Memory"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\MutexRS_CLIENT_TABLE_LOCK_C__PROGRAM_FILES_(X86)_RISING_RSD_RSSETUP_C1.DAT"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\MutexRS_CLIENT_TABLE_OPEN_C__PROGRAM_FILES_(X86)_RISING_RSD_RSSETUP_C1.DAT"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\MutexRS_SERVER_TABLE_LOCK_C__PROGRAM_FILES_(X86)_RISING_RSD_RSSETUP_S1.DAT"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\MutexRS_SERVER_TABLE_OPEN_C__PROGRAM_FILES_(X86)_RISING_RSD_RSSETUP_S1.DAT"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\RSFMAF"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\Rising_RSD_Setup_RAV"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Local_RSD_Setup_RAV"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "{E5C53971-D80E-4500-BE0D-761BF3CD8457}"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\0BE9B2B0-68B5-43f3-AC16-4846F19A4F84-CCenterravRPCOK"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "{5FB6C19F-7555-4686-BC3F-FA506047C1D8}"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "E"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75", "f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "name": "xxxxxxywerewfjlwkxxxxxxxxxxkkkkkkkkk66666666666666666666fsfds"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "{08E91450-6DDB-45ce-BA37-BE9D85B3D5EA}"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Global\\{97ED6B7B-FABA-4282-B5E8-E5150894AB99}_45116"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465"], "name": "Global\\MutexName_56E5E2AB_0105_45C3_AFB6_730732D2A14F"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Coral-{9BB4EBA7-26A1-41de-AE0C-95467A1AED6F}"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Coral.Process.DownLoadManger.Mutex.{CE9E1856-4817-47BC-B5C0-7DD93A6BED5B2}"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Coral.DB.Mutex.{AB27D7FC-54D6-4E6C-ABAA-043DFADCA0B5}"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Coral.DB.Mutex.{C71C288A-65E7-4DD0-A550-54A9C2CD612B}"}, {"hashes": ["39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "Coral.Grid.Mutex.{27A5F43D-736E-4e5b-AC34-C7AFBA9B4F5B}"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840"], "name": "mutex_qqbrowser"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840"], "name": "mutex_qqbrowser_uninstall"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "7EAF80CB-F21E-48a7-9E1F-7988364510DD"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "{{887FE1BB-7C1F-4d73-BD44-B726E1672DC7}}_RSD"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "Global\\MutexRS_CLIENT_TABLE_LOCK_C__YYYIYOU_C1.DAT"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "Global\\MutexRS_CLIENT_TABLE_OPEN_C__YYYIYOU_C1.DAT"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "Global\\MutexRS_SERVER_TABLE_LOCK_C__YYYIYOU_S1.DAT"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "Global\\MutexRS_SERVER_TABLE_OPEN_C__YYYIYOU_S1.DAT"}, {"hashes": ["f4f35f6d3f67b202700ad838697f67ea604c2548d7f59b1ed46091afc70c8449"], "name": "Global\\c7a91c61-16fa-11eb-b5f8-00501e3ae7b6"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagINKBENAGEJFAAAAA"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMNKBENAGEJFAAAAA"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMIJAENAGEJFAAAAA"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMNKBFHAGMMPAAAAA"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMIJAFHAGMMPAAAAA"}, {"hashes": ["41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagINKBFHAGMMPAAAAA"}, {"hashes": ["f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagINKBEIAGMFPAAAAA"}, {"hashes": ["f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMIJAEIAGMFPAAAAA"}, {"hashes": ["f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMNKBEIAGMFPAAAAA"}, {"hashes": ["3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMNKBCEAGECPAAAAA"}, {"hashes": ["3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagINKBCEAGECPAAAAA"}, {"hashes": ["3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMIJACEAGECPAAAAA"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMIJAGGAGALJAAAAA"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagMNKBGGAGALJAAAAA"}, {"hashes": ["8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe"], "name": "{C15730E2-145C-4c5e-B005-3BC753F42475}-once-flagINKBGGAGALJAAAAA"}], "registry": [{"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{79B5BC47-CEA1-4772-B433-7D1B3139F278}", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{F1CF8F61-AB1D-11D4-ABBD-0050BACEC828}", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{F1CF8F61-AB1D-11D4-ABBD-0050BACEC828}\\RZNBMLVLLUSWUDBORC1MMEVGU1UTRKG1MZAW", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{AC3909C5-DC79-47E5-86CA-7FB5C041A37C}", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RISING", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RISING\\RAV", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RISING\\RAV\\CFGUN", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RISING\\RAV\\CFGUN\\PREVENTUNINSTALLSWITCH", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{CAA2D3B1-4BB5-4A45-A17A-122773379D99}", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES", "value_name": "Rising"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{F1CF8F61-AB1D-11D4-ABBD-0050BACEC828}\\RZNBMLVLLUSWUDBORC1MMEVGU1UTRKG1MZAW", "value_name": "ProcKind"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{F1CF8F61-AB1D-11D4-ABBD-0050BACEC828}", "value_name": "ProcKey"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\RISING\\RAV\\CFGUN\\PREVENTUNINSTALLSWITCH", "value_name": "PreventUninstallSwitch"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{79B5BC47-CEA1-4772-B433-7D1B3139F278}\\IMPLEMENTED CATEGORIES", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{79B5BC47-CEA1-4772-B433-7D1B3139F278}\\IMPLEMENTED CATEGORIES\\{607568DD-B059-434B-B7E7-38EC51998F8E}", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE\\SHELL", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE\\SHELL\\OPEN", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE\\SHELL\\OPEN\\COMMAND", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\2345EXPLORER", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\2345EXPLORER\\EXTENSIBLE CACHE", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\2345EXPLORER\\EXTENSIBLE CACHE", "value_name": ""}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\2345EXPLORER", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\2345EXPLORER", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\2345EXPLORER.EXE", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\2345EXPLORER", "value_name": "URLInfoAbout"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\2345EXPLORER", "value_name": "Publisher"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\2345EXPLORER", "value_name": "Value2"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\2345EXPLORER", "value_name": "Value5"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\2345EXPLORER", "value_name": "video_ad_block"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\2345EXPLORER", "value_name": "DisplayIcon"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\2345EXPLORER", "value_name": "DisplayVersion"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\2345EXPLORER", "value_name": "Path"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\2345EXPLORER.EXE", "value_name": ""}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "39a496e1d562da1b0163142647a527c541ef0380577ed791f50296178ba768c5", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\2345EXPLORER.EXE", "value_name": "Path"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE", "value_name": ""}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE\\SHELL", "value_name": ""}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE\\SHELL\\OPEN", "value_name": ""}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "3bea96b04c4fc1bf00f4625b16b63d998202b499d29c420d294c3d38d3a63aaf", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\APPLICATIONS\\SHPLAYER.EXE\\SHELL\\OPEN\\COMMAND", "value_name": ""}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\BAIDU", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "86f123996ddec6990e7cab5e6df3a7bc374a3ef4361d8bf572e53d39589f99d8", "8c122c2970bf49eeab8fcd58cddf687d087663ab8fa4cfee32ae44eeda7e45fe", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "a2a52e340dffb52b75b51e44e9147a6ef58a951bb74a8d4597dfd48943405d40", "d1f0ed10cece8335abb15353b7aa8989e32247069e76c8cf4bd590ca75f46465"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\BAIDU\\BAIDUPINYIN", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\COMPATIBILITY ASSISTANT\\PERSISTED", "value_name": "C:\\Users\\ADMINI~1\\AppData\\Local\\Temp\\V8._90237_20150703213256.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\TASKBAND", "value_name": "FavoritesVersion"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_USE_WEBOC_OMNAVIGATOR_IMPLEMENTATION", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_GPU_RENDERING", "value_name": null}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_BROWSER_EMULATION", "value_name": "2345Explorer.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_USE_WEBOC_OMNAVIGATOR_IMPLEMENTATION", "value_name": "2345Explorer.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "8e4103d002eea750917ed49c1ae43b93e5bc0f61e265efe5239c9f5d507c9f85", "b746584c616ef0cd0db7fbb94d2292b4b8510049346e0e6123878e9fac38b840", "f2209bfa8fa241325dd39e08162c3932197a3d480583ee448f859f86074aaa75"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\MAIN\\FEATURECONTROL\\FEATURE_GPU_RENDERING", "value_name": "2345Explorer.exe"}, {"hashes": ["152256f7c44d897eb6b1001cc0e8a0d7c9baf48de499923894ddaa4682f25b84", "1776e8d7521cdbd6a7a5a211c11da0e32a64515964d72904010c2a1b08ed8795", "41e5d3ef200af3ed5bfc307ded1f46098581a478f26f45ba741574e07ea99b3e", "99d418835896c6026fa23fec560b555b5dc099ac136ef9c0d8145346903af916"], "key": "<HKCR>\\LOCAL SETTINGS\\MUICACHE\\7C\\52C64B7E", "value_name": "@%systemroot%\\syswow64\\unregmp2.exe,-155"}]}, "reports_count": 15}, "Win.Packed.Dridex-9783334-1": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-execute-writable", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "hook-installed", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "feed-domain-banking", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "artifact-windows-task", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0002", "TA0003", "T1053"]}, {"bi": "registry-autorun-key-modified", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "potential-registry-persistence", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-compound-cta-activity", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "task-manager-disabled", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1499"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "windows-os-reboot-detected", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005"]}, {"bi": "pe-header-timestamp-null", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "sample-modified-deleted", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "malware-dridex-detected", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "url-pastebin-service", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "mitre_attack_tags": []}, {"bi": "possible-dga-communication", "hashes": ["42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964"], "mitre_attack_tags": ["TA0011", "TA0005", "T1483"]}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Dridex is a well-known banking trojan that aims to steal credentials and other sensitive information from an infected machine.", "hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9", "ef56372c93d87f2b080914c89e0ba15f9a715cb0d40014688e6915e796cc025e", "f03d59653ef4c610688a3bc197b12404ab4ae564d2fb23cb33af113b959bb312", "f06b96b5016104a0f11d6bdd9a936667e3e0834dd7a3e88096f70da73fbeafa4"], "iocs": {"domain": [{"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "pastebin[.]com"}, {"hashes": ["09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793"], "host": "ctldl[.]windowsupdate[.]com"}, {"hashes": ["09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7"], "host": "cs11[.]wpc[.]v0cdn[.]net"}, {"hashes": ["93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793"], "host": "a767[.]dscg3[.]akamai[.]net"}, {"hashes": ["bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab"], "host": "www[.]qokgr79e2m[.]com"}, {"hashes": ["ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793"], "host": "www[.]j1vyrxmrjp[.]com"}, {"hashes": ["c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7"], "host": "www[.]yphp7pczcf[.]com"}, {"hashes": ["bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee"], "host": "www[.]xj4786k5c8[.]com"}, {"hashes": ["bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab"], "host": "www[.]yhe6v0axl4[.]com"}, {"hashes": ["bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee"], "host": "www[.]yfgjuvoszy[.]com"}, {"hashes": ["ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793"], "host": "www[.]qc6qsy78n1[.]com"}, {"hashes": ["ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793"], "host": "www[.]zqn0yzqs1e[.]com"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "host": "www[.]0avz66fog7[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]4xfbeukqkw[.]com"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "host": "www[.]0uropkrsxp[.]com"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "www[.]baxd6kgxjt[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]mmv281to35[.]com"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "host": "www[.]5u5bszp6tu[.]com"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "www[.]fwgfuexinu[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]mot5i2o2l2[.]com"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "www[.]ndltv6qila[.]com"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "host": "www[.]bo533w6ddo[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]nldnrhrmre[.]com"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "www[.]ovbrqutre3[.]com"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "host": "www[.]bxs14yn0h0[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]ptoizt3tx7[.]com"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "www[.]uv1x89ctjf[.]com"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "host": "www[.]rxgy9pxtgq[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]ubj21awsxw[.]com"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "www[.]wavxetu4mv[.]com"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "host": "www[.]yc4kxnp28x[.]com"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "host": "www[.]zv6ulm9bc1[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]uv9w47eycr[.]com"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "host": "www[.]vmrrwwincy[.]com"}, {"hashes": ["5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "host": "www[.]pgwt7rlof2[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]c8axvlgksm[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]twv2eqdnh6[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]ddvmjiw98u[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]a5s7vd9mh6[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]rqg5gezilf[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]nvegqy7mui[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]rui2rcmudq[.]com"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "host": "www[.]pkal36agig[.]com"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "host": "www[.]3lnlksssrw[.]com"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "host": "www[.]42hadubghb[.]com"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "host": "www[.]6m2y0m1oxx[.]com"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "host": "www[.]ebbasdrvn7[.]com"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "host": "www[.]evqxvhdnso[.]com"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "host": "www[.]mxfqbd67aq[.]com"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "host": "www[.]nnti1lg49m[.]com"}], "file": [{"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "path": "<malware cwd>\\old_<malware exe name> (copy)"}], "ip": [{"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "ip": "172[.]217[.]9[.]238"}, {"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "ip": "104[.]23[.]99[.]190"}, {"hashes": ["09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7"], "ip": "72[.]21[.]81[.]240"}, {"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "ip": "104[.]23[.]98[.]190"}, {"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "ip": "209[.]85[.]201[.]138/31"}, {"hashes": ["32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33"], "ip": "209[.]85[.]201[.]100/31"}, {"hashes": ["09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "209[.]85[.]201[.]113"}, {"hashes": ["43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34"], "ip": "209[.]85[.]201[.]102"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "172[.]217[.]197[.]113"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "172[.]217[.]197[.]102"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "173[.]194[.]175[.]94"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "173[.]194[.]66[.]94"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "173[.]194[.]207[.]94"}, {"hashes": ["ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793"], "ip": "23[.]3[.]13[.]154"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "74[.]125[.]192[.]95"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "172[.]217[.]197[.]105"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "172[.]217[.]197[.]84"}, {"hashes": ["93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa"], "ip": "23[.]3[.]13[.]88"}, {"hashes": ["d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813"], "ip": "173[.]194[.]204[.]94/31"}], "mutex": [{"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "name": "A6fwRjvlk5"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "name": "H8J1lICGUq"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "name": "HyCS4sdKLx"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "name": "LSdwvTQdUX"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "name": "U5WbBipwDa"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "name": "oo47WV9c65"}, {"hashes": ["d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b"], "name": "sz3sUY4qcM"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "name": "5ITIx4iM6p"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "name": "9FTPeMQvAv"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "name": "9QxMEhesCr"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "name": "LvBMkrEuFb"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "name": "dfFednqUeH"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "name": "eiXTEQ9gs2"}, {"hashes": ["e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "name": "veLyWUA7lP"}, {"hashes": ["91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411"], "name": "fpI9wyU1PB"}, {"hashes": ["91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411"], "name": "Ij4Dhw1lVK"}, {"hashes": ["91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411"], "name": "Nw67cSz7Q1"}, {"hashes": ["91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411"], "name": "98fAwBNUGq"}, {"hashes": ["91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411"], "name": "FRldFay3FE"}, {"hashes": ["91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411"], "name": "rxj6wYmHOI"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "33kZlV2YdE"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "BcrN9qpjfk"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "e9dzjVKXPV"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "frnINROIQ7"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "aYVo5y1H6W"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "crmM9bseY4"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "FzTjyIFei9"}, {"hashes": ["5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199"], "name": "WW9Tbk0GvE"}, {"hashes": ["b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686"], "name": "z6cJWaLwxJ"}, {"hashes": ["b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686"], "name": "7DRZkAjlxU"}, {"hashes": ["b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686"], "name": "ZZOqNWvkuN"}, {"hashes": ["b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686"], "name": "hXtLKuEH4w"}, {"hashes": ["b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686"], "name": "3ex7amVRrN"}, {"hashes": ["b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686"], "name": "TFerwVXf70"}, {"hashes": ["b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686"], "name": "bUsMe3aaWP"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "cnNMx5VqLc"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "VOI5XEXjwu"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "rtrCqlOWii"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "b1TLRlZEXd"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "rkjORs0Niv"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "vYD7sTYj7q"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "G5u5ZlcLBG"}, {"hashes": ["914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a"], "name": "QjsxkxCKhC"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "5N5ERBMh0I"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "BURu1QLK4U"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "Kd4X9z9WDp"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "W56scHYHrT"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "ajszJomBNX"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "cQJtaFzeNN"}, {"hashes": ["9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71"], "name": "glWW33fMgQ"}], "registry": [{"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "trkcore"}, {"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "DisableTaskMgr"}, {"hashes": ["09af88ef17761cefd758c61b143bae802862555d0f8c6d3f049413318d37b08d", "09cb95a738e2a8d830e586002b15f08d11dfefc63c446138c0a4dbbbe4a6c11a", "32decc5ea4546e511ff32b50aba9238b0a7282a92f255cc2fd90a56473b88fb1", "3f0f233d0bf149efaa5650bab50117156a1749da2b9a4af9357fa9995257ff15", "42910d308cde146f42c0912ac77365565074e687bdab03eede59f0d78603ab9f", "43e6790036afc84588e501cc8c2c2a73c9a29c3efd3e12a5aec9d1030133f00b", "5bdd04a60eca8a918b0d02153e9c7ebb6bd7b40a0f1c64ecdceb7d5011278199", "64b26b69347fe739180de3fb93e7dccc0cc1125b5bc0ca32dbc4f6946cb5c5fe", "74175e1672bf3edcc4b646a864a797fbdba27bb46bdaa8b1bd16215e08553964", "75ebe05f98ec3646befcfca399f9704fd869b1bcd355eab97f848c275455b893", "82c09a3e5927895c96cd7bd56fc7721aa51c8f29b85d9787b65cd6c48b205b34", "8ba571b545ed160f9f5478cca7333fc0a9efbd86b3a2d854791137414848a542", "914a65e35660512331540075cfead41a7fd79216e9422269adfef8d9f7d1078a", "91f1e56261a579bc958964de0cf2bd76c74ee3605bd747b53de2ed97ab6dd411", "93a6029fa7d1ebbc1ca6f3e7df17867338e9b396a59ef315c3bb952fa53df8fa", "9a0fb835619dd01b774b56a51510d6cb611f49918f43708b33687da40b005e71", "9c0bad682b05c817a8e4222f7b7b3e1652a072d436417cb549cc23b487a6ae33", "b3bbccf1d221357ec5a0463268ed771b210177ac1f15996a95ce7bf2c624d686", "bc1889aa8dd037ebaf42098801c9fb782281f8111613f928bd9b77f506b8dfab", "bc385e551cb8ee72bb7fdd0f7c4de6d35569c0bf7fd8c180bc010a63dea9fdee", "c8dd6c83aa706111ae6856ae9512a52a2170315fec6c0e7707242a979d87c6a7", "ca839e56067a3f0b82019352e12b5f102e4f0cb6898adc3b3f5733783ad8c793", "d1e7e69c8c690cb15b33e4237f0b3cde183fa44d89e1b9981efe46efe69cb813", "d84c4dfafbb3d1ad8b5cd5d1b03f82a00a44d42ce77001116c7cf0cb225f342b", "e6c58c3dadedced94877a6cf9942da069eafa2cb017092b5c02d71a4b6a367a9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.CHECK.0", "value_name": "CheckSetting"}]}, "reports_count": 25}, "Win.Ransomware.Cerber-9783078-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "13e66520cc4b8a7c1b936ec079b7f9d21cf51e57e8ad2424f6a6a716ecb69355", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "35322c5363034d61e5583c2511ff47bee893662ed1fabe95a8640c00c81cbc6a", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "13e66520cc4b8a7c1b936ec079b7f9d21cf51e57e8ad2424f6a6a716ecb69355", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "35322c5363034d61e5583c2511ff47bee893662ed1fabe95a8640c00c81cbc6a", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "13e66520cc4b8a7c1b936ec079b7f9d21cf51e57e8ad2424f6a6a716ecb69355", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "35322c5363034d61e5583c2511ff47bee893662ed1fabe95a8640c00c81cbc6a", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "13e66520cc4b8a7c1b936ec079b7f9d21cf51e57e8ad2424f6a6a716ecb69355", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "35322c5363034d61e5583c2511ff47bee893662ed1fabe95a8640c00c81cbc6a", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "13e66520cc4b8a7c1b936ec079b7f9d21cf51e57e8ad2424f6a6a716ecb69355", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "35322c5363034d61e5583c2511ff47bee893662ed1fabe95a8640c00c81cbc6a", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "modified-executable", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "process-long-cmdline", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-communications-http-get", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "network-snort-malware", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "altered-sample-snort-flagged", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "network-http-blank-user-agent", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "public-ip-address-identification-attempt", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "registry-autorun-key-modified", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "registry-autorun-suspicious-public-ip", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "registry-hide-files", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1158"]}, {"bi": "unsigned-roaming-execution", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005"]}, {"bi": "excessive-udp-connections", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}, {"bi": "malware-ransomware-cerber", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0040", "T1486"]}, {"bi": "startup-folder-modification", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "process-uses-localhost-traffic", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005"]}, {"bi": "process-ping", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0011", "TA0007", "T1049"]}, {"bi": "process-ping-localhost", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0011", "TA0007", "T1016"]}, {"bi": "startup-folder-lnk-file", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "command-deleted-shadow-copy", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1490"]}, {"bi": "malware-generic-ransomware-backup-del", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "wmic-shadowcopy-delete", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0002", "TA0040", "T1047", "T1490"]}, {"bi": "microsoft-block-rule-list-app-executed", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "bcdedit-disable-recovery", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "TA0003", "T1490"]}, {"bi": "process-taskkill", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "bcdedit-ignore-failure", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "TA0003", "T1490"]}, {"bi": "lnk-no-creation-date", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0002", "T1064"]}, {"bi": "registry-autorun-commandprocessor", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "screen-saver-modified", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0003", "T1180"]}, {"bi": "pe-imports-toolhelp", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "network-file-downloaded-to-disk", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": []}, {"bi": "process-hollowing-detected", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-windows-task", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": ["TA0002", "TA0003", "T1053"]}, {"bi": "process-requested-named-pipe", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": ["TA0004", "TA0005"]}, {"bi": "modified-file-in-program-dir", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "excessive-file-modifications", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "malware-generic-ransomware-entropy", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "process-deletes-many-files", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "enumeration-email-program-information", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1114"]}, {"bi": "modified-file-in-system-dir", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-vm", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "network-fast-flux-domain", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046"], "mitre_attack_tags": []}, {"bi": "network-snort-server", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046"], "mitre_attack_tags": []}, {"bi": "feed-public-ip-check-dns", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["13e66520cc4b8a7c1b936ec079b7f9d21cf51e57e8ad2424f6a6a716ecb69355", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "35322c5363034d61e5583c2511ff47bee893662ed1fabe95a8640c00c81cbc6a", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04"], "mitre_attack_tags": []}, {"bi": "file-ini-read", "hashes": ["f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d"], "mitre_attack_tags": []}, {"bi": "file-ini-modified", "hashes": ["f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d"], "mitre_attack_tags": ["TA0003"]}, {"bi": "process-explorer-suspicious-launch", "hashes": ["203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "network-snort-protocol", "hashes": ["4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a"], "mitre_attack_tags": []}, {"bi": "registry-ie-lock-toolbar", "hashes": ["203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8"], "mitre_attack_tags": ["TA0009", "T1185"]}, {"bi": "at-created-task-and-hidden-file-disabled", "hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "network-opendns-malicious", "hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "mitre_attack_tags": []}, {"bi": "network-dns-category-proxy", "hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "mitre_attack_tags": []}, {"bi": "altered-sample-dns-flagged", "hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "sample-launched-copy-domain-flagged", "hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "mitre_attack_tags": ["TA0005", "T1102"]}, {"bi": "js-in-html-calls-activex-object", "hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071"], "mitre_attack_tags": []}], "category": "Ransomware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Cerber is ransomware that encrypts documents, photos, databases and other important files. Historically, this malware would replace files with encrypted versions and add the file extension \".cerber,\" although in more recent campaigns other file extensions are used.", "hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "13e66520cc4b8a7c1b936ec079b7f9d21cf51e57e8ad2424f6a6a716ecb69355", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "35322c5363034d61e5583c2511ff47bee893662ed1fabe95a8640c00c81cbc6a", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a136bf18428682744ecef13dbe924e5793053884be12adfa5c010a4dd7b14f76", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "iocs": {"domain": [{"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "host": "ip-api[.]com"}, {"hashes": ["101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8"], "host": "ipinfo[.]io"}, {"hashes": ["101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8"], "host": "freegeoip[.]net"}, {"hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "host": "www[.]torproject[.]org"}, {"hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "host": "cerberhhyed5frqa[.]as13fd[.]win"}, {"hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "host": "cerberhhyed5frqa[.]zx34jk[.]win"}, {"hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "host": "cerberhhyed5frqa[.]rt4e34[.]win"}, {"hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "host": "cerberhhyed5frqa[.]xo59ok[.]win"}, {"hashes": ["c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "host": "cerberhhyed5frqa[.]6oifgr[.]win"}], "file": [{"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\{6F885251-E36F-0FE6-9629-63208157D7A2}"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\{6F885251-E36F-0FE6-9629-63208157D7A2}\\Component_00"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\{6F885251-E36F-0FE6-9629-63208157D7A2}\\Component_01"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\{6F885251-E36F-0FE6-9629-63208157D7A2}\\Component_03"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.en\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.es\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-002C-0409-0000-0000000FF1CE}-C\\Proof.fr\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0044-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0044-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0044-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0044-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-00A1-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0116-0409-1000-0000000FF1CE}-C\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0116-0409-1000-0000000FF1CE}-C\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0116-0409-1000-0000000FF1CE}-C\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0116-0409-1000-0000000FF1CE}-C\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{90140000-0117-0409-0000-0000000FF1CE}-C\\Access.en-us\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{91140000-0011-0000-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{91140000-0011-0000-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{91140000-0011-0000-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "\\MSOCache\\All Users\\{91140000-0011-0000-0000-0000000FF1CE}-C\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%HOMEPATH%\\Contacts\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%HOMEPATH%\\Contacts\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%HOMEPATH%\\Contacts\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%HOMEPATH%\\Contacts\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%ProgramFiles(x86)%\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%ProgramFiles(x86)%\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%ProgramFiles(x86)%\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%ProgramFiles(x86)%\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\# DECRYPT MY FILES #.vbs"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\Microsoft\\Access\\# DECRYPT MY FILES #.html"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\Microsoft\\Access\\# DECRYPT MY FILES #.txt"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\Microsoft\\Access\\# DECRYPT MY FILES #.url"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "path": "%APPDATA%\\Microsoft\\Access\\# DECRYPT MY FILES #.vbs"}], "ip": [{"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "ip": "208[.]95[.]112[.]1"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "ip": "31[.]184[.]234[.]0/23"}, {"hashes": ["101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a"], "ip": "216[.]239[.]32[.]21"}, {"hashes": ["101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a"], "ip": "104[.]26[.]14[.]73"}, {"hashes": ["101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634"], "ip": "216[.]239[.]38[.]21"}, {"hashes": ["101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a"], "ip": "216[.]239[.]36[.]21"}, {"hashes": ["101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a"], "ip": "104[.]26[.]15[.]73"}, {"hashes": ["3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8"], "ip": "172[.]67[.]75[.]176"}, {"hashes": ["12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee"], "ip": "216[.]239[.]34[.]21"}, {"hashes": ["17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4"], "ip": "5[.]9[.]72[.]48"}, {"hashes": ["77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4"], "ip": "217[.]172[.]179[.]54"}, {"hashes": ["77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4"], "ip": "130[.]0[.]232[.]208"}, {"hashes": ["77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4"], "ip": "144[.]76[.]108[.]82"}, {"hashes": ["77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4"], "ip": "185[.]253[.]217[.]20"}, {"hashes": ["77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4"], "ip": "45[.]90[.]34[.]87"}, {"hashes": ["77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4"], "ip": "83[.]151[.]238[.]34"}], "mutex": [{"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "name": "shell.{381828AA-8B28-3374-1B67-35680555C5EF}"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "name": "GeneratingSchemaGlobalMapping"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "name": "cversions.1.m"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "name": "cversions.2.m"}, {"hashes": ["0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd"], "name": "shell.{<random GUID>}"}, {"hashes": ["0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805"], "name": "Local\\InternetShortcutMutex"}, {"hashes": ["27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3"], "name": "{C20CD437-BA6D-4ebb-B190-70B43DE3B0F3}"}], "registry": [{"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\ADVANCED", "value_name": "Hidden"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\ADVANCED", "value_name": "ShowSuperHidden"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\ADVANCED", "value_name": "SuperHidden"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCU>\\PRINTERS\\DEFAULTS\\{21A3D5EE-E123-244A-98A1-8E36C26EFF6D}", "value_name": null}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "101b08dcaba66e977d4eb0ac70a2aefc120e20d1bb101e77d04e77d9f7d616e9", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "18af23671757dfa0569e670f0629e3dba8907541c950c9001de1b9aa77a5ed04", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27703462bb5f7faa95c5ed7d9b71d958446f66cdda814116bfb311beffa6bedf", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3718985103242e830152c23563ab92e94d963a34d828e8af14132a66deff7ebd", "3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "58c1b3c7c6cb957f7a5612c32eb5093485b7e00c6efe5cb0b916ab337501ac3d", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "69516a531d766226ae1a6b056022d7d438e8b33cbdbc56c3a320186f9791c5d3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77b08653024012f7dd30a42a681b9add10916d508b57464127f8cf402b19a7c4", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7a9c2f18e60209d7ab1ebe9f4e8abc4566f95f7c4ea91fc62fd5203a9a339a0f", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8e937abea663ca031d0db547a91f27fdea76b035ce22e0a4ed1385449d1bfafd", "8f2fcde392cc8e3a03b15cabf0d8fe5687b5d07d02004a1a08c57ef5989b8729", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "95dae592e2702e37b3b6850c0fc50aac02a6ecd9bf8866d8b5d01d201151e4db", "9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "a18ae4298f571b14be0490d9220e236790f1bd0ca77b4136b1f09c35321a6eeb", "a901608885901634c169e91692dea52ff050f5dd7cb0a60a6d925f59e7d2826b", "aad3efefeac15a0aeeac371ef5a9c9b342a4fec783b90dd30841700cef55e62d", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c0802f837116653c4fc739ea1966b2c912887348fdd684bf68ea1f933e508da8", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c134b4478f5ef0abf6c92af84638eebe4d56a7a00b2bd3293b92b0ac3a328ebf", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "e12831fc8d0bf2b908eb7334bbe6053c947e5bc2085929ad977277ff8e90595a", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c", "e8947406a95ac921b9afff04f981e0dace55eb1bd8373c6fa95e6d2086a1ebcb", "e906471a1c4b6005b1926526df2bc4bae8bc84fb1f3a49ab0e8346282134a476", "ecc5839353d5f8aad0ab6fb935f83d7c43535d9bb8cdb52531c333d56defbb73", "ef41ae5ba4806b35791e9daa45c99c4238a3656d16de2edd32f906ddca62862f", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f2eba4983e52a802678c7d6c4e5ac14ce1df9bce5b5dad1f0775f5c8a2748ee7", "f40167c0a8559e14bdaa8187f0e67d35ee937ea369a01b79be249dc0bc0dc033", "f460f5ee31ccfed384f6be178ad573d6dad8cf0066caace440c967b01bc361e1", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fa7aa52bfc276aac22a94b54fd0b560f1f7ce894d2bf1d75940193ae35e355ee", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCU>\\PRINTERS\\DEFAULTS", "value_name": null}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "12b82c4810c7d876f28168ace81681fdd5bbec9368490b407545ce5a9720352b", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "27d1fd048c0088c09f4b8180967c610ecd08d8661a4b89b065bcb69aa1a78119", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "32c72d0e2a298df6eb1035c865c8f33964f05ada7825ad02070d8664527f3805", "3de62a744f10557fbf741988a53dc9a2fc6b21097b977adf39b363c54c884fa3", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "4e126050a40dad087bccf1995bf8fd3a295b8150a12a2d6db6e2310332cc6d7f", "4fb92675ae82b1647f9a0536d55faff0115f7ff0f91fbaa7894867ece8367812", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "6f9e7eddd2458f025358be2e2b3fdd239b0b0131ace9ce525f0cc5ebcec06287", "7492b3cefc9b13ebbf335a18cd241ecd34d10b7a371a1dcc75e256ab8277b82c", "77cabd7d1f01a76ff5e083c0f0ba27a764f351ce60ceda22631d89b65b362f9c", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "7eb52bf5b2f3ea7e7a3e72fb0eb4d3f761aef267b93c69801f49cbe60bac3844", "8fa2321b0c9e0c0638b1ab0c31adc2cd23b8fdac156105eb0c2ab4f5e43b4561", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "956bbbae89a974d1d71ac776adab2dd47701ccd2598ec5d4bba774b015368980", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "bd4ea9680b34b36ee4b2c9248ed5a7c7e8ee24e16fd14ef85c5a23258c315e6d", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "c9d464069383770823bf01368a13695d4944e2bbd1edb09c121a8306386f2337", "d5be95cbfc6a58ec71e62fcaf72d70908c7c28a043c95d830d3865167501e7b2", "d7e8bc445da88a7605bd26e72566839315d23dfad1d0d0c5f60e2775872ed288", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f65317a50d675039a7ddb51d5341132b31f7c0200da59feca891ccf908b10307", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCU>\\PRINTERS\\DEFAULTS\\{21A3D5EE-E123-244A-98A1-8E36C26EFF6D}", "value_name": "Installed"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCR>\\LOCAL SETTINGS\\MUICACHE\\7C\\52C64B7E", "value_name": "LanguageList"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "238c896469ed592cb90cbcba697f08002c0deacc7a0ef7d16982533d472d9fe0", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "29b73665a63863c619e8d0c316a5ea0efb88f8d5c59246834be2b1ad2e92148f", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "5c66410df219c362de09d20f68fb3dc1e9db3004635c9a959787dbffcec0c3e3", "6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "78e88c37480fa84ff6d7623642d9dd207cbb1b67ed631e07ebfb182d0705d558", "947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "a154236e349950835cc57d9548f89638b011db080268fc77159603fbcefa0970", "b6480a5ba78a1dd9a64adfc2a25fac175c7e9684db5e678d4aa6f8abdff006c6", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73", "dd8e5cc443a510986bb07f8ecd046345fd1de351adc21d17e4ae84a3ed7a2de8", "efa1f4795ea27a757d69c794fd39cf27604c68da07e9e756775d61520f7823d4", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd", "f8ad4bd3200780d1cb6ec8e2b7d72ec2a10b3619cec95bfbef0c008d1343c219", "fed6cfcdf9026358e2b62ed7eaf1552bd194883b8c568dcc266cc783b15f9328"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER", "value_name": "CleanShutdown"}, {"hashes": ["0b8af69c0a2b8b2b884d05a2e505d5161030e2a40a9d34dd64083eb3118844ab", "203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "27c35f49abaa4dc41969f4fd75670fbb06cbe11e87c56f34fa78f634c9d6d4d8", "54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APPLETS\\SYSTRAY", "value_name": "Services"}, {"hashes": ["203cdb2be697f2da0b9c7005b30fa13675a158d9223a23131b44dbaadc1d287e", "44c73dc12b3e7f3fb8ecb7a0a58b5c27f7ca6386f73943aa9f9460ef7f513071", "6b254d875ef39f9ae40a63334d0649f73a0e01a0e020b7f5ade3acbe85e368f4"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "FlashPlayerApp"}, {"hashes": ["0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "dnscacheugc"}, {"hashes": ["0e84505b9c770eadb390d70c33f215fac5cb82d869f544bef89bf2ef112a6dc2", "32e3a27a330bc82c7980edc6ab0a33a5f407bd9a61724ae0ac10346a93e66138", "3f1b118c8a11ed83a2f00b3dfd9726f13397ba21fbf0f08bcf0e697b679bb726"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "dnscacheugc"}, {"hashes": ["2ba7251e8d3030225be7b14d2dcc8a22479edf4c19dd87db9af8740b07114f04", "2f19da28a63129dcc3dbbb39f59d19bf2cf56c8dd67831ea1fc471818b2dd1fa", "c08ec33c1149206ba595cac39b448c97692877e4e4b91a96fbdac9e58ad36b73"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "xpsrchvw"}, {"hashes": ["3a959f4e373430a7af84a8aa276e12df4f171ff42a822c88d9d4139c04d6f261", "57f06bccc08656711e136a13c47c0da4fc1938e38255ec9f89620fa736c702c5"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "DWWIN"}, {"hashes": ["1f27e14b7997f4cd0a368c9f9add32b592ebbb63bc81033a356d6212c85bf67b", "7806303c29f2d759778066389e950a32d1535fb9074cfbf43b29a6ed7538f528"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "takeown"}, {"hashes": ["31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "java"}, {"hashes": ["31b0b0bfe0932f3ec2e387890b00c10b741d70115da20c5af7cb1e279d42625e", "b419e751d0477ebe656657d85aa8aca3eaff9f8cac151a2509f2a1a44d86f69d"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "java"}, {"hashes": ["6a43ab7d10685d9ed4f61158c534508fec2263c7f1e4488272def5e8eb3d8826", "c15bf9404fc9603e433c37c01754fe3874fd75e7cf030ac12369db863825f046"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "sdbinst"}, {"hashes": ["18165fa21cb4fcd2ace9dbd9205409c045d07c71f4f0ea64ac23b074a9498f46", "f50b544ac445b306d3414d95f8328786423698b7e2b3d91eb1936859b872dcfd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "fc"}, {"hashes": ["54b8149f7cf5da5611b49cd0d5c8ceb50fc1d8f59a4c6e9569c0f6732f1a4cf3", "e62c07447c4c264e33500d2e7873dcd640d54bf55b760356c41ef3e94926726c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "wuapp"}, {"hashes": ["173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "odbcconf"}, {"hashes": ["173d25a96dcccd51318cfb9cdfee8c8f99826caa3081fedc8160e6b15e38c2f1", "b58b0c7f54906a74bafb68353e2994fe0a97ce6c8a8dcb0f07541394a801159c"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "odbcconf"}, {"hashes": ["ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "mcbuilder"}, {"hashes": ["ca35ec41b7f70a24e31da8ad0a05b115ac63698d8238158add9fe7967b108634", "d82152e214d9370d36df6900e0f746c9047bbcf07d2e652c7c4cf5543d7acba0"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "mcbuilder"}, {"hashes": ["6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "cmdkey"}, {"hashes": ["6a793c46f20910fefc1f928b3172f3893dc02b248973f18b4168c508f8ed7ce3", "90aaa18138e7e8178fb646d7a1dab89de4994c86753c1b27a589e34bc4c70e75"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "cmdkey"}, {"hashes": ["947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "cliconfg"}, {"hashes": ["947398cdf8340ed83542be993cf70b77aa18ba7220497da5ad40c9ea6df0c79b", "fd5e00e7d0509c706c0a28751b12498e025485a462699da9845df9a5036b8cd8"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "cliconfg"}, {"hashes": ["2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "fontview"}, {"hashes": ["2518e9b31474f9e1f0114ad71e2c14f71c9a06060d0143b84b50e4f14a3a3980", "cc4cba10afb1ce0a528654350340533b474e1c175340a6d937d0e7c0aeb0635a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "fontview"}, {"hashes": ["17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "RunLegacyCPLElevated"}, {"hashes": ["17850b4e7fac01d4ad3d8dd30f06ecb9a82db7fc5b6eb38e50597082a59d1e8c", "af29e6a4130a9d613fd2c5411e526269d566c50e3b8a716eb7974d43fdc04c40"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "RunLegacyCPLElevated"}, {"hashes": ["276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "verclsid"}, {"hashes": ["276e7d98b2e77b64988596426f884296960f17f110ab24ff2568258219a16b76", "dd4cc841ce1dbd5f020f8967a153cd2d09be460c1f34eb0b98214a031947326f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "verclsid"}, {"hashes": ["9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "WPDShextAutoplay"}, {"hashes": ["9661bc1084724e232d62617ccab87205d7b478de44d10260b65fceac022d21ea", "f05d80f73c63fd9b4766cf1ced2f44531862c13b35dc214098e1de1c5f5c77eb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "WPDShextAutoplay"}]}, "reports_count": 93}, "Win.Trojan.DarkComet-9781595-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-filename-mismatch", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "files-created-vbs", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0002", "T1064"]}, {"bi": "vbs-calls-shell", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "pe-imports-psapi-dll", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "pe-certificate", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "vbs-creates-and-runs", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0002", "T1064"]}, {"bi": "pe-imports-toolhelp", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "startup-folder-modification", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "pe-uses-autoit", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "malware-known-trojan-av-signed", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0006", "TA0003", "TA0004", "T1056", "T1179"]}, {"bi": "unsigned-roaming-execution", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005"]}, {"bi": "pe-tls-callback", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "pe-section-shared", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "startup-folder-lnk-file", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "malware-darkcomet-registry-detected", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "malware-darkcomet-mutex-detected", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "registered-com-server", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": ["TA0002", "T1106"]}, {"bi": "process-taskkill", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "process-hollowing-detected", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "pe-section-execute-writable", "hashes": ["9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-blank-name", "hashes": ["9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-uses-armadillo", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-autorun-key-modified", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "potential-registry-persistence", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": []}, {"bi": "pe-subtype-com", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": []}, {"bi": "pe-packed-asprotect", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-dns-category-webspam", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": []}, {"bi": "process-windows-script-launched", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": ["TA0005", "TA0002", "T1064"]}, {"bi": "dot-net-process-hollowing-detected", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "network-dns-safe-categories", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": []}, {"bi": "malware-trojan-xtreme-rat-registry-key", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": []}, {"bi": "backdoor-behavior-detected", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "backdoor-registry-persistence", "hashes": ["d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": ["TA0011", "TA0003", "T1219"]}, {"bi": "pe-invalid-checksum", "hashes": ["9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-russian", "hashes": ["9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-arabic", "hashes": ["9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": []}, {"bi": "process-requested-direct-io", "hashes": ["9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "mitre_attack_tags": ["TA0007", "TA0005", "T1120", "T1006"]}, {"bi": "pe-uses-visual-basic", "hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-vm", "hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "modified-file-in-system-dir", "hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": []}, {"bi": "service-dll-registration", "hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": ["TA0003", "T1050"]}, {"bi": "windows-util-dll-injection-tool", "hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "mitre_attack_tags": ["TA0005", "T1121"]}, {"bi": "artifact-flagged-sandbox", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "mitre_attack_tags": ["TA0005", "T1497"]}, {"bi": "registry-shell-default-file-handler-created", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "mitre_attack_tags": ["TA0003", "T1112"]}, {"bi": "file-handler-registration", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "mitre_attack_tags": ["TA0003", "T1042"]}, {"bi": "process-modified-quick-launch-file", "hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "mitre_attack_tags": ["TA0003", "T1176"]}, {"bi": "artifact-flagged-suspicious-au3", "hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c"], "mitre_attack_tags": ["TA0005", "TA0002", "T1027", "T1064"]}, {"bi": "pe-resource-lang-spanish", "hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "embedded-pe-resource2", "hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-korean", "hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "mitre_attack_tags": []}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "DarkComet and related variants are a family of remote access trojans designed to provide an attacker with control over an infected system. Capabilities of this malware include the ability to download files from a user's machine, mechanisms for persistence and hiding, and the ability to send back usernames and passwords from the infected system.", "hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "iocs": {"domain": [{"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "host": "xcdsdd[.]no-ip[.]org"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "host": "voip-proxy[.]voip01[.]com"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320"], "host": "medhat[.]myq-see[.]com"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320"], "host": "cccxxxx[.]servequake[.]com"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "host": "11410cc[.]admingas[.]com"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "host": "kingprog[.]no-ip[.]org"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "host": "microsoft[.]net[.]linkpc[.]net"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "host": "network-service[.]myq-see[.]com"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "host": "voip-proxy[.]rr[.]nu"}], "file": [{"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\CONFIG.lnk"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\ACS.COM"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\ACS.HTT"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\lol.cmd"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\lol.vbs"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%APPDATA%\\dclogs"}, {"hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\sip.exe"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\aspr_keys.ini"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\libsipnative.dll"}, {"hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "path": "%HOMEPATH%\\Desktop\\eyeBeam.lnk"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\ijpm.com"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\CONFIG.VBS"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\start.cmd"}, {"hashes": ["9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\Sip_Tool.exe"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\ lol.vbs"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\15126.NPY"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\2929303.vbe"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\61396.GOF"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles(x86)%\\V-Lite\\unins000.dat"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\6906121.RID"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\V-Lite\\Uninstall V-Lite.lnk"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\V-Lite\\V-Lite.lnk"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\axc.vbe"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\ijpm.sys"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "path": "%HOMEPATH%\\tmp\\start"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\V_Lite_1000.exe"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\COMCTL32.OCX (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\MSWINSCK.OCX (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\SKCL.dll (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\Skin.css (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\Skin.lic (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\Skin.ocx (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\V-lite.exe (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\lic.ini (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\ring.wav (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\unins000.dat"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%ProgramFiles%\\V-Lite\\unins000.exe (copy)"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "path": "%System32%\\voiplite.ocx (copy)"}, {"hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\CounterPath\\eyeBeam 1.5\\Uninstall eyeBeam.lnk"}, {"hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "path": "%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\CounterPath\\eyeBeam 1.5\\eyeBeam.lnk"}, {"hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\Quick Launch\\eyeBeam.lnk"}, {"hashes": ["6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\setup.exe"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\BatVoip.exe"}, {"hashes": ["c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\Sip.cmd"}, {"hashes": ["c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\Sip.vbe"}, {"hashes": ["c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\Sip.vbs"}, {"hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "path": "%TEMP%\\is-N6HNC.tmp\\is-JROD2.tmp"}, {"hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "path": "%TEMP%\\is-U1K9E.tmp\\_shfoldr.dll"}, {"hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "path": "%APPDATA%\\Microsoft\\Internet Explorer\\Eyebeam.exe"}], "ip": [{"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "ip": "37[.]8[.]24[.]63"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "cf06e02ea64b78a79d8537045bffae323fe9459520604c3d6a47e67745278320"], "ip": "192[.]145[.]120[.]42"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "ip": "192[.]3[.]138[.]58"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "ip": "156[.]206[.]233[.]239"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "ip": "41[.]43[.]191[.]164"}, {"hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "ip": "204[.]79[.]197[.]200"}], "mutex": [{"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "name": "DC_MUTEX-9DFRKQ7"}, {"hashes": ["73cfe6fd3629a82ed86118c448b62ad6ce6a01a13006576027b04b92e361023c", "d743b7be3b0222e64d1767932456227c5b5e93d4065b5239516a717c13fbbc79"], "name": "--((BAN))--"}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a"], "name": "BatVoip"}, {"hashes": ["9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443"], "name": "SUA41015F7B117446e4BED6587B760E3831"}], "registry": [{"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "6f67e7a825ebb4d7967d9d0534535202c3f9612a9fbcf8e7c9c84fb7d7a42339", "8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "9dac760d7f17a483323225cb11628fc5e58cfe9e7e36b88367496d4775584443", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKCU>\\SOFTWARE\\DC3_FEXEC", "value_name": null}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "key": "<HKCU>\\SOFTWARE\\ASPROTECT", "value_name": null}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "key": "<HKCU>\\SOFTWARE\\ASPROTECT\\SPECDATA", "value_name": null}, {"hashes": ["2805cae6ec67e9c96178763409cf1dc6469e8f2f98cea41639c99bdc937f567a", "9c00e6e91ef23526765921a0f2c646239f27d3af9869320da9b0079bf36c45d0", "c1bfa678a7c3cc862db5f37ce03a8a808374e1a59c2594260deb72d56f30b5d8"], "key": "<HKCU>\\SOFTWARE\\ASPROTECT\\SPECDATA", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{747FAA95-5D00-4EA1-9F1F-035D2A88FDA4}", "value_name": null}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{747FAA95-5D00-4EA1-9F1F-035D2A88FDA4}\\PROXYSTUBCLSID32", "value_name": null}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{747FAA95-5D00-4EA1-9F1F-035D2A88FDA4}\\TYPELIB", "value_name": null}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{2935849A-3F6A-4DF8-8395-CF9AB3BE1835}", "value_name": null}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\VAXSIPUSERAGENTOCX.VAXSIPUSERAGENTOCXCTRL.1", "value_name": null}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\VAXSIPUSERAGENTOCX.VAXSIPUSERAGENTOCXCTRL.1\\CLSID", "value_name": null}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{2935849A-3F6A-4DF8-8395-CF9AB3BE1835}\\CONTROL", "value_name": null}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{148188FB-A6D9-48BC-AE37-65786376CD8E}\\1.0", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{148188FB-A6D9-48BC-AE37-65786376CD8E}\\1.0\\FLAGS", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{148188FB-A6D9-48BC-AE37-65786376CD8E}\\1.0\\0\\WIN32", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\TYPELIB\\{148188FB-A6D9-48BC-AE37-65786376CD8E}\\1.0\\HELPDIR", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{9858F01E-3474-40B6-996B-7867195B6A6C}", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{9858F01E-3474-40B6-996B-7867195B6A6C}\\PROXYSTUBCLSID32", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{9858F01E-3474-40B6-996B-7867195B6A6C}\\TYPELIB", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{9858F01E-3474-40B6-996B-7867195B6A6C}\\TYPELIB", "value_name": "Version"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{747FAA95-5D00-4EA1-9F1F-035D2A88FDA4}", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{747FAA95-5D00-4EA1-9F1F-035D2A88FDA4}\\PROXYSTUBCLSID32", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{747FAA95-5D00-4EA1-9F1F-035D2A88FDA4}\\TYPELIB", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\INTERFACE\\{747FAA95-5D00-4EA1-9F1F-035D2A88FDA4}\\TYPELIB", "value_name": "Version"}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\VAXSIPUSERAGENTOCX.VAXSIPUSERAGENTOCXCTRL.1", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\VAXSIPUSERAGENTOCX.VAXSIPUSERAGENTOCXCTRL.1\\CLSID", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{2935849A-3F6A-4DF8-8395-CF9AB3BE1835}", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{2935849A-3F6A-4DF8-8395-CF9AB3BE1835}\\INPROCSERVER32", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{2935849A-3F6A-4DF8-8395-CF9AB3BE1835}\\CONTROL", "value_name": ""}, {"hashes": ["8a801a14b31e833d28ab041143f5e4df09b435900e520f203be4ef75f5e0ea74", "d069a2c0b47bdd7aca8d9a12ca1a7066bee07dad806c8c35d70b192b2424d923"], "key": "<HKLM>\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{2935849A-3F6A-4DF8-8395-CF9AB3BE1835}\\INPROCSERVER32", "value_name": "ThreadingModel"}]}, "reports_count": 10}, "Win.Trojan.Zusy-9783138-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["3a8a64cc4749fbeef33eb7d7372ab87ae640f090b9cf273013d63d28c4fba906", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["3a8a64cc4749fbeef33eb7d7372ab87ae640f090b9cf273013d63d28c4fba906", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["3a8a64cc4749fbeef33eb7d7372ab87ae640f090b9cf273013d63d28c4fba906", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["3a8a64cc4749fbeef33eb7d7372ab87ae640f090b9cf273013d63d28c4fba906", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "memory-execute-readwrite", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "process-hollowing-detected", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "T1093"]}, {"bi": "pe-invalid-checksum", "hashes": ["3a8a64cc4749fbeef33eb7d7372ab87ae640f090b9cf273013d63d28c4fba906", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "registry-winlogon-key-modified-nt", "hashes": ["748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0003", "T1112"]}, {"bi": "modified-file-in-user-dir", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "pe-packed-upx", "hashes": ["c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "file-ini-read", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-nameserver", "hashes": ["748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "network-dns-category-dynamic", "hashes": ["748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": []}, {"bi": "file-ini-modified", "hashes": ["748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0003"]}, {"bi": "process-created-additional-desktop", "hashes": ["748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005", "T1143"]}, {"bi": "netbios-query", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": []}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "enumeration-browser-information", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1217"]}, {"bi": "files-deleted-used-batch", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "cmd-exe-file-execution", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "malware-generic-infostealer", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}, {"bi": "enumeration-email-program-information", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119", "T1114"]}, {"bi": "process-with-multiple-children", "hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "mitre_attack_tags": ["TA0005"]}, {"bi": "process-long-cmdline", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-login-info-guest-modified", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1098"]}, {"bi": "malware-pony-stealer-detected", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "mitre_attack_tags": []}, {"bi": "malware-fareit-file-activity", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "mitre_attack_tags": []}, {"bi": "registry-login-info-modified", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112", "T1098"]}, {"bi": "network-dns-safe-categories", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "mitre_attack_tags": []}, {"bi": "enumeration-ftp-program-information", "hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}, {"bi": "pe-uses-armadillo", "hashes": ["cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-subtype-com", "hashes": ["cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6"], "mitre_attack_tags": []}, {"bi": "file-pending-delete", "hashes": ["cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6"], "mitre_attack_tags": ["TA0005", "T1107"]}, {"bi": "process-explorer-suspicious-launch", "hashes": ["92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3"], "mitre_attack_tags": ["TA0005", "T1055"]}, {"bi": "pe-resource-lang-russian", "hashes": ["92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0011", "TA0010", "T1105", "T1043"]}, {"bi": "network-communications-smtp", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-snort-protocol", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": []}, {"bi": "network-smtp-spambot", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": []}, {"bi": "public-ip-address-identification-attempt", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": []}, {"bi": "windows-firewall-halted", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "net-service-stop", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0002", "T1035"]}, {"bi": "malware-ufr-mutex-detected", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": []}, {"bi": "enumeration-chat-program-information", "hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "mitre_attack_tags": ["TA0007", "TA0006", "TA0009", "T1083", "T1081", "T1005", "T1119"]}, {"bi": "artifact-flagged-anomaly", "hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-large-data-entry", "hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "mitre_attack_tags": ["TA0005", "T1112"]}, {"bi": "file-alternate-data-stream-deletion", "hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "mitre_attack_tags": ["TA0005"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": []}, {"bi": "modified-executable", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": []}, {"bi": "listening-port-opened", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "registry-autorun-key-data-dir", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "unsigned-roaming-execution", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0005"]}, {"bi": "pe-imports-toolhelp", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-compound-cta-activity", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": []}, {"bi": "registry-ie-zone-settings-modified", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0005", "T1089"]}, {"bi": "sample-modified-deleted", "hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "mitre_attack_tags": ["TA0005", "T1107"]}], "category": "Trojan", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Zusy, also known as TinyBanker or Tinba, is a trojan that uses man-in-the-middle attacks to steal banking information. When executed, it injects itself into legitimate Windows processes such as \"explorer.exe\" and \"winver.exe\". When the user accesses a banking website, it displays a form to trick the user into submitting personal information.", "hashes": ["038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3a8a64cc4749fbeef33eb7d7372ab87ae640f090b9cf273013d63d28c4fba906", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a", "9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920", "fbefdffab649401aea06704b99e86e5e41cac0c41c22574fbc486a65125ee8a8"], "iocs": {"domain": [{"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "host": "econtractsupplemental[.]biz"}, {"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "host": "irresistiblenitro[.]pw"}, {"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "host": "zoneupdate[.]xxuz[.]com"}, {"hashes": ["4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981"], "host": "bw10[.]ru"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "host": "whatismyip[.]akamai[.]com"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "host": "smtp[.]mail[.]ru"}, {"hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "host": "com-index[.]org"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "host": "www[.]l0ng-sheng[.]com"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "host": "gradusyporno[.]biz"}], "file": [{"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "path": "%APPDATA%\\skype.dat"}, {"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "path": "%APPDATA%\\skype.ini"}, {"hashes": ["9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50"], "path": "%APPDATA%\\Microsoft Corporation"}, {"hashes": ["92fcfbd45360ad571df6e6652ade1989bf8f405dc0365042516eec71337decf0", "d593383a7af4d48b75e4b5de89b889195570dd1fab9ee0d2cb024f44299716a3"], "path": "%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\qw2jd.exe"}, {"hashes": ["9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50"], "path": "%TEMP%\\<random, matching [A-F0-9]{1,4}>.tmp"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "\\TEMP\\ufr_reports"}, {"hashes": ["cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50"], "path": "%APPDATA%\\Microsoft Corporation\\webid.emo"}, {"hashes": ["4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e"], "path": "%TEMP%\\1067368434.bat"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "\\TEMP\\ufr_reports\\NO_PWDS_report_25-10-2020_06-43-32-11B0A35710D760E40567A55CF3411F9E-LHON.bin"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "%TEMP%\\report_25-10-2020_06-43-32-11B0A35710D760E40567A55CF3411F9E-LHON.bin"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "%TEMP%\\NO_PWDS_report_25-10-2020_06-43-32-11B0A35710D760E40567A55CF3411F9E-LHON.bin"}, {"hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "path": "%APPDATA%\\575583278"}, {"hashes": ["9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6"], "path": "%APPDATA%\\Microsoft Corporation\\rasRes.po"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "path": "%TEMP%\\tmpe730cf78.bat"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "path": "%APPDATA%\\Ogag"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "path": "%APPDATA%\\Ogag\\pyga.exe"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "path": "%APPDATA%\\Xiev"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "path": "%APPDATA%\\Xiev\\otyd.kah"}, {"hashes": ["884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981"], "path": "%TEMP%\\1067358263.bat"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "%TEMP%\\NO_PWDS_report_25-10-2020_06-53-33-24A511FDDE70B159AAEB7EB3DA92FBEA-NHON.bin"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "%TEMP%\\NO_PWDS_report_25-10-2020_06-53-33-24A511FDDE70B159AAEB7EB3DA92FBEA-NHON.bin (copy)"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "%TEMP%\\report_25-10-2020_06-53-33-24A511FDDE70B159AAEB7EB3DA92FBEA-NHON.bin"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "path": "\\ufr_reports\\NO_PWDS_report_25-10-2020_06-53-33-24A511FDDE70B159AAEB7EB3DA92FBEA-NHON.bin"}], "ip": [{"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "ip": "94[.]100[.]180[.]160"}, {"hashes": ["7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "ip": "160[.]72[.]43[.]240"}], "mutex": [{"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "name": "Local\\MSCTF.Asm.MutexMyDesktop1"}, {"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "name": "Local\\MSCTF.CtfMonitorInstMutexMyDesktop1"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "name": "UFR3"}, {"hashes": ["cb407e78fe8074db49ed67a09256188c1f4a9dbf17e52993ec7e9eae2f720eed"], "name": "UACMutexxxxx"}, {"hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "name": "UPDATE__"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "name": "Local\\{FC1598C2-51AC-3064-B0DB-AEA399D273CB}"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "name": "Local\\{D7B3FDF3-349D-1BC2-B0DB-AEA399D273CB}"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "name": "Local\\{FC1598C1-51AF-3064-B0DB-AEA399D273CB}"}, {"hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "name": "MAIN_575583278"}, {"hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "name": "BACKUP_575583278"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "name": "GLOBAL\\{<random GUID>}"}], "registry": [{"hashes": ["038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "shell"}, {"hashes": ["038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9", "1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd", "3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb", "8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a", "a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac", "c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974", "e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON", "value_name": "Shell"}, {"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MULTIMEDIA\\DRAWDIB", "value_name": null}, {"hashes": ["1dbaa6d5180e36d442468cc09103a3af7c5419d51efd1be5c169db76a1a3bb4b", "55adb469aa11ffb5332da78a65ee2250745681e9d13a08d0fd0b6ccf7658f23a", "748f24efcc5abc9b27ad543656be18eb9be9a41e6b7b789ff93cd476a33058e5", "7b39ff2ab4b35564b0c27c3b6f7d5863d5e937f18d33a4e8dac1f7bed4e7eac9", "a1b77e096c72aca159e1adb0bb60ae89437bf6597c19ac2a76d749a35d4db81a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\MULTIMEDIA\\DRAWDIB", "value_name": " 1152x864x32(BGR 0)"}, {"hashes": ["4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981"], "key": "<HKCU>\\SOFTWARE\\WINRAR", "value_name": null}, {"hashes": ["9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER", "value_name": null}, {"hashes": ["4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981"], "key": "<HKCU>\\SOFTWARE\\WINRAR", "value_name": "HWID"}, {"hashes": ["9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "NvCplWow64"}, {"hashes": ["9f9490914db8bdcaccce7bbb9f6813693c869e4ff72e5eb0630a66d24496eed6", "cf4532cebf80a5f9dc92cd0649804034a5d0e2de697f7ea1cf295f466b555d50"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER", "value_name": "PendingFileRenameOperations"}, {"hashes": ["4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981"], "key": "<HKLM>\\SAM\\SAM\\DOMAINS\\ACCOUNT\\USERS\\000003E9", "value_name": "F"}, {"hashes": ["4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981"], "key": "<HKLM>\\SAM\\SAM\\DOMAINS\\ACCOUNT\\USERS\\000001F5", "value_name": "F"}, {"hashes": ["4d14fdd922da3edfdb5b429df8399d7c8d54726d86a249f89d19f3ada679777e", "884a0ec81a0b59f9a7607e83517fd76c8870c05327102ab285a612b865445981"], "key": "<HKLM>\\SAM\\SAM\\DOMAINS\\ACCOUNT\\USERS\\000003EC", "value_name": "F"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER", "value_name": "CleanShutdown"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "q"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\PROVIDERS\\EVENTLOG\\{01979C6A-42FA-414C-B8AA-EEE2C8202018}", "value_name": "LastKnownState"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\PROVIDERS\\EVENTLOG\\{11CD958A-C507-4EF3-B3F2-5FD9DFBD2C78}", "value_name": "LastKnownState"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\PROVIDERS\\EVENTLOG\\{945A8954-C147-4ACD-923F-40C45405A658}", "value_name": "LastKnownState"}, {"hashes": ["038a6e721ccaf4f85cbf6426f9ac56398329a5b0d5e39b47e252ec9fc36a4cd9"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S1863976"}, {"hashes": ["2704c91b79122541aedd73cf566d9d21954b2749e66ffd09a990f5d819db92cd"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S433451"}, {"hashes": ["8f8e087073bd97a8881e2d4d0e4495ebe3f9d4ed0fd5a8d899b769d7d169de0b"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S7917121"}, {"hashes": ["7f9b0633c56f790d398eae54a490e3fd6862ce581d2546ecbdfe4133cfddb4bb"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S93753"}, {"hashes": ["c8e3e4a8100670eb38dca4b65b5d69d10771cc77baf11df8270264764c4e1974"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S1485975"}, {"hashes": ["3dc9d2f984818f1ab09fd1e497999a776d937b52ca63dfdc9105f8f8aa8dc70f"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S1578498"}, {"hashes": ["76b4c17a991180198ae56b3fda91fedc542a94ea4ee3d6e9f5a9c20b40652155"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S98148193"}, {"hashes": ["a1eb43cdbbbe64b92279b9a566ca729e6c6c401ad5881f904a13303851fcd9ac"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S95106110"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.101", "value_name": "CheckSetting"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.103", "value_name": "CheckSetting"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.100", "value_name": "CheckSetting"}, {"hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "*575583278"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.102", "value_name": "CheckSetting"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{E8433B72-5842-4D43-8645-BC2C35960837}.CHECK.104", "value_name": "CheckSetting"}, {"hashes": ["7515cfb46897fe00687528035e5b6821976057e7d7a6a121f87d77b5bbb1dff5"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "*575583278"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OFHIHY", "value_name": null}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\OFHIHY", "value_name": "Yxugubr"}, {"hashes": ["54a6f0cc265f47e8055d45f46690c72ce54471c3a47a9503ae77e2d1af97fc50"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "{1A01E4EA-2D84-D670-B0DB-AEA399D273CB}"}, {"hashes": ["e359b5c61f1a6b345877dab75733bc73496df478387cbb0dcefe741f92750920"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "S1107865"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\PROVIDERS\\EVENTLOG\\{A5268B8E-7DB5-465B-BAB7-BDCDA39A394A}", "value_name": "LastKnownState"}, {"hashes": ["9572e7c55e5a3bfa38958106de95f6fff4e11b51993a0f37a3658b443c7b203a"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "Microsoft Updater"}]}, "reports_count": 25}, "Win.Worm.Gamarue-9781588-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055", "T1181"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "process-svchost-suspicious-launch", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": ["TA0005"]}, {"bi": "registry-autorun-key-modified", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "dns-public-server-contacted", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "malware-compound-cta-activity", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "pe-resource-lang-russian", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-nameserver", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "modified-executable", "hashes": ["2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-autorun-key-bat-file", "hashes": ["5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "mitre_attack_tags": ["TA0003", "T1060"]}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23"], "mitre_attack_tags": []}, {"bi": "pe-header-timestamp-prior", "hashes": ["3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479"], "mitre_attack_tags": []}], "category": "Worm", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Gamarue, also known as Andromeda, is a botnet used to spread malware, steal information and perform activities such as click fraud.", "hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "cdcbb9aeca9ec2e346b2123750bd8ac3ca49f10a77efe624e033b635977dcbcd", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "iocs": {"domain": [{"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "host": "windows-online[.]org"}, {"hashes": ["1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7"], "host": "update[.]microsoftcom[.]org"}], "file": [{"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "path": "%ProgramData%\\Local Settings"}, {"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "path": "%ProgramData%\\Local Settings\\Temp"}, {"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109"], "path": "%ProgramData%\\Local Settings\\Temp\\msioizi.scr"}, {"hashes": ["85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823"], "path": "%ProgramData%\\Local Settings\\Temp\\msitayvm.pif"}, {"hashes": ["5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7"], "path": "%ProgramData%\\Local Settings\\Temp\\mshfra.bat"}, {"hashes": ["519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706"], "path": "%ProgramData%\\Local Settings\\Temp\\msziubvuf.exe"}, {"hashes": ["1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb"], "path": "%ProgramData%\\Local Settings\\Temp\\mscwxwa.com"}, {"hashes": ["3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479"], "path": "%ProgramData%\\Local Settings\\Temp\\msbuuu.com"}, {"hashes": ["517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3"], "path": "%ProgramData%\\Local Settings\\Temp\\msofwe.cmd"}, {"hashes": ["44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469"], "path": "%ProgramData%\\Local Settings\\Temp\\msbaow.exe"}, {"hashes": ["2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f"], "path": "%ProgramData%\\Local Settings\\Temp\\msbxck.com"}, {"hashes": ["dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "path": "%ProgramData%\\Local Settings\\Temp\\mscqpy.bat"}, {"hashes": ["31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f"], "path": "%ProgramData%\\Local Settings\\Temp\\mswuxfovo.cmd"}, {"hashes": ["6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1"], "path": "%ProgramData%\\Local Settings\\Temp\\msiqfufi.exe"}, {"hashes": ["2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5"], "path": "%ProgramData%\\Local Settings\\Temp\\msukunxua.exe"}, {"hashes": ["5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7"], "path": "%TEMP%\\WER5F3.tmp.WERInternalMetadata.xml"}], "ip": [{"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "ip": "40[.]70[.]224[.]146"}, {"hashes": ["1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb"], "ip": "99[.]86[.]230[.]122"}], "mutex": [{"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "name": "2562100796"}, {"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "name": "lol"}, {"hashes": ["68312000c6ef7512bd7165f1e2e7c72a62da374577897d3427f80a0547568a23"], "name": "Global\\0cb96421-147d-11eb-887e-00501e3ae7b6"}], "registry": [{"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": null}, {"hashes": ["06b4f131a4a113b2e84944d4e8c0d2f0e726e2fb9df3a4fbbadcc3a0ba67f109", "1bd8e3a2169c78d4095aaab9babb21c5583de6e6303e65f459bd42ff6134b5fb", "2bbe259d1986310f44bcf3cfc2ba5734d930863b8b753be89a3d02653c97cde5", "2cead89d831f5d5d0e0e864b93a5c8fb695ca26d845e92473a9d699779f9145f", "31531c19e5ca46451505e7721987bd206a993477c73b03d4092886fd1e800c7f", "3330c832688db6e11cc929013f8478cee67af8a62571d6bcaf669d2023765479", "44964e83b6b35625717b4d67a3f79072e62b1220366c41ce80fc5d1aea2fd469", "517fb755ea9d177149f9aba5ec84bf701800b4a95afeecf84820c3e52131d8e3", "519696e96240333e4f46c2fe80fa476d00650570b7e1bd1722ce8c27052c9706", "5373b5d455604c58737b7c85087d05c54f920a689ba188b187c60fe7d6bc6bf7", "6d437f74cafc9ed41762efc4be7fda18c001ec00d8bf71e0c49e769058d4f0b1", "85d0d7ce5fdec6019cbe387cdc66d04d766fcc5257ca227f4afc8a06e28d6823", "dc6cc4db0a70ff203925609342517e23e9717f084ec0f3b92c1850ce79767609"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN", "value_name": "36412"}]}, "reports_count": 15}, "exprev": [{"count": 4919, "description": "DealPly is adware, which claims to improve your online shopping experience. It is often bundled into other legitimate installers and is difficult to uninstall. It creates pop-up advertisements and injects advertisements on webpages. Adware has also been known to download and install malware.", "name": "Dealply adware detected"}, {"count": 4755, "description": "Process hollowing is a technique used by some programs to avoid static analysis. In typical usage, a process is started and its obfuscated or encrypted contents are unpacked into memory. The parent then manually sets up the first stages of launching a child process, but before launching it, the memory is cleared and filled in with the memory from the parent instead.", "name": "Process hollowing detected"}, {"count": 1298, "description": "Behavior assocaited with Fareit has been detected. Fareit is an information stealing trojan that can send sensitive data back to an attacker from the victim machine.", "name": "Fareit trojan has been detected"}, {"count": 1195, "description": "An attempt to exploit CVE-2019-0708 has been detected. The vulnerability, dubbed BlueKeep, is a heap memory corruption which can be triggered by sending a specially crafted Remote Desktop Protocol (RDP) request. Since this vulnerability can be triggered without authentication and allows remote code execution, it can be used by worms to spread automatically without human interaction.", "name": "CVE-2019-0708 detected"}, {"count": 827, "description": "A process was injected into, most likely by an existing Kovter infection. Kovter is a click fraud Trojan that can also act as an information stealer. Kovter is also file-less malware meaning the malicious DLL is stored inside Windows registry and injected directly into memory using PowerShell. It can detect and report the usage of monitoring software such as wireshark and sandboxes to its C2. It spreads through malicious advertising and spam campaigns.", "name": "Kovter injection detected"}, {"count": 588, "description": "Install core is an installer which bundles legitimate applications with offers for additional third-party applications that may be unwanted. The unwanted applications are often adware that display advertising in the form of popups or by injecting into browsers and adding or altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Installcore adware detected"}, {"count": 522, "description": "Crystalbit-Apple DLL double hijack was detected. During this attack, the adversary abuses two legitimate vendor applications, such as CrystalBit and Apple, as part of a dll double hijack attack chain that starts with a fraudulent software bundle and eventually leads to a persistent miner and in some cases spyware deployment.", "name": "Crystalbit-Apple DLL double hijack detected"}, {"count": 402, "description": "An attempt to bypass application whitelisting via the \"Squiblydoo\" technique has been detected. This typically involves using regsvr32.exe to execute script content hosted on an attacker controlled server.", "name": "Squiblydoo application whitelist bypass attempt detected."}, {"count": 319, "description": "A PowerShell command with a very long command line argument that may indicate an obfuscated script has been detected. PowerShell is an extensible Windows scripting language present on all versions of Windows. Malware authors use PowerShell in an attempt to evade security software or other monitoring that is not tuned to detect PowerShell based threats.", "name": "Excessively long PowerShell command detected"}, {"count": 305, "description": "A process associated with Microsoft Office, such as EXCEL.exe or WINWORD.exe, has started a Windows utility such as powershell.exe or cmd.exe. This is typical behavior of malicious documents executing additional scripts. This behavior is extremely suspicious and is associated with many malware different malware campaigns and families.", "name": "A Microsoft Office process has started a windows utility."}, {"count": 192, "description": "Bluestacks adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Bluestacks adware detected"}, {"count": 102, "description": "Gamarue is a family of malware that can download files and steal information from an infected system. Worm variants of the Gamarue family may spread by infecting USB drives or portable hard disks that have been plugged into a compromised system.", "name": "Gamarue malware detected"}, {"count": 90, "description": "An exploit payload intended to connect back to an attacker controlled host using tcp has been detected.", "name": "Reverse tcp payload detected"}, {"count": 86, "description": "Maze ransomware has been detected injecting into rundll32.exe or regsvr32.exe. Maze can encrypt files on the victim and demand a ransom. It can also exfiltrate data back to the attacker prior to encryption.", "name": "Maze ransomware detected"}, {"count": 74, "description": "Trickbot is a banking Trojan which appeared in late 2016. Due to the similarities between Trickbot and Dyre, it is suspected some of the individuals responsible for Dyre are now responsible for Trickbot. Trickbot has been rapidly evolving over the months since it has appeared. However, Trickbot is still missing some of the capabilities Dyre possessed. Its current modules include DLL injection, system information gathering, and email searching.", "name": "Trickbot malware detected"}, {"count": 38, "description": "A malware dropper has been detected. A dropper will download or unpack addtional malware during it's execution. A variety of techniques can be employed for the payload to gain persistence and escalate privelege if neccessary.", "name": "Malware dropper detected"}, {"count": 29, "description": "An exploit payload intended to connect back to an attacker controlled host using http has been detected.", "name": "Reverse http payload detected"}, {"count": 18, "description": "Fusion (or FusionPlayer) is an adware family that displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Fusion adware detected"}, {"count": 10, "description": "IcedID is a banking Trojan. It uses both web browser injection and browser redirection to steal banking and/or other financial credentials and data. The features and sophistication of IcedID demonstrate the malware author's knowledge and technical skill for this kind of fraud, and suggest the authors have previous experience creating banking Trojans. IcedID has been observed being installed by Emotet or Ursnif. Systems infected with IcedID should also be scanned for additional malware infections.", "name": "IcedID malware detected"}, {"count": 8, "description": "Smoke Loader has been detected. Smokeloader is used mainly to execute other malicious software, like ransomware or cryptocurrency miners. Its initial infection vector is usually an email with a malicious Microsoft Word document or delivered through an exploit kit. Smokeloader uses various plugins designed to steal data from its victims, particularly credentials stored on the system or transfered over HTTP, HTTPS, FTP, SMTP, POP3 or IMAP.", "name": "Smoke Loader detected"}, {"count": 5, "description": "Cobalt Strike is a tool used by both penetration testers and malicious actors. It has been observed being used to deliver Ryuk ransomware and other payloads.", "name": "Cobalt Strike activity detected"}], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2020-10-30T15:34:46+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Doc.Downloader.Emotet-9781906-1", "Win.Trojan.Zusy-9783138-0", "Win.Packed.Dridex-9783334-1", "Win.Worm.Gamarue-9781588-0", "Win.Trojan.DarkComet-9781595-0", "Win.Ransomware.Cerber-9783078-0", "Win.Dropper.NetWire-9781821-0", "Win.Malware.Ramnit-9783386-0", "Win.Dropper.LokiBot-9783471-0"]}