{"Win.Dropper.BazarLoader-9819187-1": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["82dbcaa7694a6e763300cee1d4b2ef6e65f6a65fd93663365ce032823984cb21", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "3941242436e943fbfb7b1767aa2615bcc5637da3d939d3b06a1572de8bf044a1", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "3985648d781de545cf1209469454b88f7f6e54696b6a050dbb7ba2ba1eae2cec", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "44075e5eb7ee76b006a8f4cf2bfee30dec3c5007c02f8657f956429bb976ea4b", "bed288ad6037546ecfb9e912518583fefbb7685681a8ecfd5b27502735de20bd", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "bbe896ab541c703d699f97311a30c2e07be98be1ebf7eed9a9a1fd7dfa2efb5b", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["82dbcaa7694a6e763300cee1d4b2ef6e65f6a65fd93663365ce032823984cb21", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "3941242436e943fbfb7b1767aa2615bcc5637da3d939d3b06a1572de8bf044a1", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "3985648d781de545cf1209469454b88f7f6e54696b6a050dbb7ba2ba1eae2cec", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "44075e5eb7ee76b006a8f4cf2bfee30dec3c5007c02f8657f956429bb976ea4b", "bed288ad6037546ecfb9e912518583fefbb7685681a8ecfd5b27502735de20bd", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "bbe896ab541c703d699f97311a30c2e07be98be1ebf7eed9a9a1fd7dfa2efb5b", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["82dbcaa7694a6e763300cee1d4b2ef6e65f6a65fd93663365ce032823984cb21", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "3941242436e943fbfb7b1767aa2615bcc5637da3d939d3b06a1572de8bf044a1", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "3985648d781de545cf1209469454b88f7f6e54696b6a050dbb7ba2ba1eae2cec", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "44075e5eb7ee76b006a8f4cf2bfee30dec3c5007c02f8657f956429bb976ea4b", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "bbe896ab541c703d699f97311a30c2e07be98be1ebf7eed9a9a1fd7dfa2efb5b", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["82dbcaa7694a6e763300cee1d4b2ef6e65f6a65fd93663365ce032823984cb21", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "3941242436e943fbfb7b1767aa2615bcc5637da3d939d3b06a1572de8bf044a1", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "3985648d781de545cf1209469454b88f7f6e54696b6a050dbb7ba2ba1eae2cec", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "44075e5eb7ee76b006a8f4cf2bfee30dec3c5007c02f8657f956429bb976ea4b", "bed288ad6037546ecfb9e912518583fefbb7685681a8ecfd5b27502735de20bd", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "bbe896ab541c703d699f97311a30c2e07be98be1ebf7eed9a9a1fd7dfa2efb5b", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63"], "mitre_attack_tags": []}, {"bi": "pe-certificate-invalid-signing-date", "hashes": ["82dbcaa7694a6e763300cee1d4b2ef6e65f6a65fd93663365ce032823984cb21", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "3941242436e943fbfb7b1767aa2615bcc5637da3d939d3b06a1572de8bf044a1", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "3985648d781de545cf1209469454b88f7f6e54696b6a050dbb7ba2ba1eae2cec", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "44075e5eb7ee76b006a8f4cf2bfee30dec3c5007c02f8657f956429bb976ea4b", "bed288ad6037546ecfb9e912518583fefbb7685681a8ecfd5b27502735de20bd", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "bbe896ab541c703d699f97311a30c2e07be98be1ebf7eed9a9a1fd7dfa2efb5b", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63"], "mitre_attack_tags": []}, {"bi": "network-opendns-malicious", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "process-hollowing-detected", "hashes": ["2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9", "0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "dns-query-nxdomain", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "network-dns-category-phishing", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": []}, {"bi": "dns-public-server-contacted", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "dns-bypassed-assigned-server", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "opennic-domain-detected", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31"], "mitre_attack_tags": []}, {"bi": "network-dns-category-cnc", "hashes": ["2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31"], "mitre_attack_tags": ["TA0011"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact-mid", "hashes": ["bed288ad6037546ecfb9e912518583fefbb7685681a8ecfd5b27502735de20bd"], "mitre_attack_tags": []}, {"bi": "high-heuristic-score", "hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": []}, {"bi": "network-dns-category-new", "hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-http-blank-user-agent", "hashes": ["74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648"], "mitre_attack_tags": ["TA0011", "T1071"]}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "BazarLoader is used to drop follow-on malware on an infected system, most commonly the Trickbot banking trojan or Ryuk ransomware. BazarLoader is named in part because its command and control communications typically occur to domain names using the .bazar top-level domain.", "hashes": ["0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "3941242436e943fbfb7b1767aa2615bcc5637da3d939d3b06a1572de8bf044a1", "3985648d781de545cf1209469454b88f7f6e54696b6a050dbb7ba2ba1eae2cec", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "44075e5eb7ee76b006a8f4cf2bfee30dec3c5007c02f8657f956429bb976ea4b", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "82dbcaa7694a6e763300cee1d4b2ef6e65f6a65fd93663365ce032823984cb21", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "bbe896ab541c703d699f97311a30c2e07be98be1ebf7eed9a9a1fd7dfa2efb5b", "bed288ad6037546ecfb9e912518583fefbb7685681a8ecfd5b27502735de20bd", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9"], "iocs": {"domain": [{"hashes": ["392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9"], "host": "impactpsychcoloradoo[.]com"}, {"hashes": ["0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0"], "host": "freekaratee[.]com"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "birch-psychology[.]com"}, {"hashes": ["392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49"], "host": "elevateyoga-denver[.]com"}, {"hashes": ["392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49"], "host": "flourish-psychology[.]net"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d"], "host": "busybjjj[.]com"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d"], "host": "flux-psychology[.]com"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "noservers"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638"], "host": "cubiibek[.]bazar"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638"], "host": "ektuuded[.]bazar"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638"], "host": "ibufuded[.]bazar"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638"], "host": "qeliudom[.]bazar"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638"], "host": "wyufeluh[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owfionew[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owolibqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owoltoew[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owoludqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owostoca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owtiibca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owyktoew[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owymsoqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "owyxsoew[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "tuogonyw[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "tyahsoem[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "tyisibca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "tyisudac[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "tyogtoqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "tyossoem[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "tyymonca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ucfiudca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ucyktoyw[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ufahibyw[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ufebelca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "uficelqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ufodelqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ufogsoac[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ufolonac[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "uftiibac[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ufupsoac[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "vurysoem[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "vuykibqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ydebtoac[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ydoludem[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ydtatoqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ydtitoac[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "yduponqe[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "yduptoca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ypazelyw[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "yposudca[.]bazar"}, {"hashes": ["67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "host": "ypybtoac[.]bazar"}], "file": [], "ip": [{"hashes": ["392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49", "e1841e78c6dace694cc5172bac1068b9ede38a3623c5429a877eb1190d90a14d", "f088236bb9ad5bffd42b6328ae966344444311f79f9d679d8256ce3656fa6ad9"], "ip": "185[.]82[.]127[.]115"}, {"hashes": ["0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0"], "ip": "94[.]140[.]114[.]152"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "107[.]152[.]32[.]121"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "192[.]236[.]155[.]212"}, {"hashes": ["392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49"], "ip": "192[.]119[.]171[.]165"}, {"hashes": ["392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e", "4be75ecc81192ea74d09a2d60a3dd629426fcb988800784112a1d7877344a503", "6aefd19d41aa2a2584d25b5b89230c33bc13e9b55c73896e94b661546073dd81", "b8d852655caae079b534ff0f058dc3843a7d38c5ca646d78423bf40bdc9d6d91", "c422ea456bf322b5033f2d8a968e8cd7b1be47a6e310612c90840e2df76fbc49"], "ip": "185[.]244[.]151[.]185"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "185[.]121[.]177[.]177"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "208[.]67[.]222[.]222"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "208[.]67[.]220[.]220"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "5[.]135[.]183[.]146"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "169[.]239[.]202[.]202"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "69[.]164[.]196[.]21"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "217[.]12[.]210[.]54"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "5[.]45[.]97[.]127"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "82[.]141[.]39[.]32"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "162[.]248[.]241[.]94"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "172[.]98[.]193[.]42"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "192[.]99[.]85[.]244"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "142[.]4[.]204[.]111"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "176[.]126[.]70[.]119"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "142[.]4[.]205[.]47"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "172[.]104[.]136[.]243"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "163[.]172[.]185[.]51"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "51[.]255[.]211[.]146"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "89[.]35[.]39[.]64"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "35[.]196[.]105[.]24"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "147[.]135[.]185[.]78"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "139[.]59[.]23[.]241"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "94[.]177[.]171[.]127"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "45[.]63[.]124[.]65"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "77[.]73[.]68[.]161"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "185[.]164[.]136[.]225"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "63[.]231[.]92[.]27"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "96[.]47[.]228[.]108"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "45[.]32[.]160[.]206"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "ip": "167[.]99[.]153[.]82"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d"], "ip": "195[.]123[.]241[.]79"}, {"hashes": ["392c73ffa3b1513cd8de9435d7e76320eff7f98db884eb6bc776c3b2bea7c77e"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d"], "ip": "173[.]194[.]68[.]94"}, {"hashes": ["4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d"], "ip": "74[.]125[.]192[.]95"}, {"hashes": ["4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d"], "ip": "209[.]85[.]232[.]101"}, {"hashes": ["4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d"], "ip": "173[.]194[.]204[.]101"}], "mutex": [{"hashes": ["0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0"], "name": "{98821448-3638-4f11-831f-edbf359cd4ad}"}, {"hashes": ["0e809ef68d85e730190db2663ab914dfd6ccb4c355a051841366b3a5c91ada63", "21df8a331f272ed9b6b72509028af31612292c9f3c0776a4472b2b585c142648", "2be628add2ab1be6120026893c6a7a51dc0b3f81c7421349504a6010581aa427", "74d757a4cabf26009ab5f1064939c54ceea43a8399419a7c965b2edb7e0ed648", "90a51557f3438fec9b2ffab5828751cb43fa9eeb1fa84468effe95a9f13f12d0"], "name": "{b54b793c-ee44-4b0a-99bf-2954404ad218}"}, {"hashes": ["102dca8d268dbbba33770459009d4d67e0d714b44523c28fce57ee83fe186a31", "2c6b49185dea80c48dcdd1c316a0de3413ff52a67819a720419c630093b5e638", "436301cb89dadecb6c6cefc043b8a4d8f47de2054b1e84e1612cf061cd14dc15", "4c4b00621d0e57bcdf188174a539ca3c92a4fc96647eabe6d79c17ae04bd519d", "67da5b6ab704468511385140553e23d9481bb7865bddf87d9b333cc7990d7504"], "name": "K9PM2Z2XQO5YDC3ETDFDM8XVPV47T"}], "registry": []}, "reports_count": 23}, "Win.Dropper.Bunitu-9819420-0": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-packed-upx", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-tls-callback", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": []}, {"bi": "malware-trojan-bunitu-mutex-detected", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": []}, {"bi": "artifact-pe-no-dos", "hashes": ["9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-vm", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": []}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "artifact-flagged-antianalysis", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "modified-executable", "hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": []}, {"bi": "sample-launched-copy-of-self", "hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "artifact-windows-task", "hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "pe-imports-psapi-dll", "hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "pe-imports-toolhelp", "hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "task-ran-using-system-account", "hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "network-http-non-standard-port", "hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0011", "T1571"]}, {"bi": "network-http-numeric-ip", "hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-fast-flux-domain", "hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-only-safe-domains-contacted", "hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": []}, {"bi": "public-ip-address-identification-attempt", "hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "mitre_attack_tags": []}], "category": "Dropper", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "Bunitu is malware that establishes a persistent foothold on an infected machine and turns it into a proxy for criminal VPN services.", "hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "iocs": {"domain": [{"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "host": "b[.]myvlownsnow[.]com"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "host": "r[.]myvlownsnow[.]com"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "host": "admex175x[.]xyz"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "host": "api[.]ipify[.]org"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "host": "servx278x[.]xyz"}, {"hashes": ["3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537"], "host": "cds[.]d2s7q6s2[.]hwcdn[.]net"}, {"hashes": ["3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537"], "host": "ctldl[.]windowsupdate[.]com"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "host": "elb097307-934924932[.]us-east-1[.]elb[.]amazonaws[.]com"}, {"hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6"], "host": "yan0212[.]com"}], "file": [{"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "path": "%APPDATA%\\MasterTok"}, {"hashes": ["053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "path": "%LOCALAPPDATA%\\frunkuf\\frunkuf.dll"}, {"hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "0ac23547fbef3ba4e1406b9a7d3df6d084d58a91a7d203efb9646b75ca27d7f3", "294e517fa8c82e31042801d9e979811a125b0f225cd0a69adb41d607de72f1c6", "c24736c198fc83ca45f514c8ad9186a6f00f7d9125f848bcdd01ac5e11bb0ae8", "d4c9c66eef13150b9440456d5e7d59ad37e6f0012bd82e9044821e6e45a482d2"], "path": "%TEMP%\\CC4F.tmp"}, {"hashes": ["4ea7b6b8257b4719ae70e5312eb99ccfd1efa178e368f710ccc5fab55b644014", "68026652534673e968f9dd47df70ce8ccdab506b64c9644c88b8b242acb4f8cd", "7580d4de778e9ae82d73da0096518ee13adc55cdb7f874bec9c07f48a67a527c", "b5d43454f5920ac4c891cc6c2434649911a16b9ce764d2340704d607a480cbbf"], "path": "%TEMP%\\9E5E.tmp"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "path": "%ProgramData%\\ptaq"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "path": "%ProgramData%\\ptaq\\afpi.exe"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "path": "%SystemRoot%\\Tasks\\afpi.job"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "path": "%System32%\\Tasks\\afpi"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "path": "%ProgramData%\\iwhwwk"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "path": "%ProgramData%\\iwhwwk\\ctbx.exe"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "path": "%SystemRoot%\\Tasks\\ctbx.job"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "path": "%System32%\\Tasks\\ctbx"}, {"hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6"], "path": "%ProgramData%\\mnlomki"}, {"hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6"], "path": "%ProgramData%\\mnlomki\\ahcqcl.exe"}, {"hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6"], "path": "%SystemRoot%\\Tasks\\ahcqcl.job"}, {"hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6"], "path": "%System32%\\Tasks\\ahcqcl"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "path": "%ProgramData%\\xuol\\aleaj.exe"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "path": "%SystemRoot%\\Tasks\\aleaj.job"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47"], "path": "%LOCALAPPDATA%\\nitasfa\\nitasfa.dll"}], "ip": [{"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "ip": "66[.]199[.]229[.]251"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "ip": "5[.]61[.]40[.]13"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "ip": "5[.]61[.]42[.]235"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "ip": "216[.]58[.]206[.]107"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "ip": "172[.]217[.]197[.]138/31"}, {"hashes": ["01b9f7dc34a07b72ab789c9ac8f281d667ce662f4135bc76ff90a7da856f5add", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093"], "ip": "172[.]217[.]197[.]102"}, {"hashes": ["053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f"], "ip": "172[.]217[.]197[.]100/31"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "ip": "5[.]199[.]174[.]223"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e", "8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "ip": "45[.]153[.]240[.]65"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "ip": "194[.]109[.]206[.]212"}, {"hashes": ["3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b"], "ip": "172[.]217[.]197[.]113"}, {"hashes": ["3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537"], "ip": "205[.]185[.]216[.]10"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "178[.]79[.]169[.]193"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "159[.]69[.]36[.]3"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "128[.]31[.]0[.]34"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "199[.]58[.]81[.]140"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "23[.]21[.]42[.]25"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "54[.]235[.]189[.]250"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "ip": "23[.]21[.]140[.]41"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "ip": "18[.]133[.]158[.]66"}, {"hashes": ["8ea08b2cc34f72797ee15eed1b5cfe64b92cc1a086c83b1956d236005e285f6f"], "ip": "165[.]22[.]5[.]30"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "195[.]189[.]99[.]121"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "51[.]38[.]147[.]96"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "93[.]228[.]169[.]237"}, {"hashes": ["7a6e59c895c28e0b4a683b2ee4b1e5f2da7d4a288ff287acf26f5c50609043b6"], "ip": "109[.]234[.]35[.]186"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "193[.]182[.]61[.]9"}, {"hashes": ["1727aedcbeff54ddbfe28715273b392e5a6ce0e57ee61ecbb124c1111a41430e"], "ip": "71[.]120[.]139[.]139"}], "mutex": [{"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "fe711d65-f31a-4c22-a12f-cec65d231941"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "55731fe5-97ad-47dc-953f-37a8aca1451b"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "3c159c86-0e90-47d1-ad37-788c00ba2948"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "1cce886d-1841-4e18-963b-15f2e90a3c44"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "069e4409-bd54-4a1f-8e37-49da2cf6a537"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "9b765102-98e7-43e2-a003-f8cbdfab8a64"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "0ca9a8d3-01bf-4f9e-bfc7-7eb51e67e0c4"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "d86a1229-2cb7-409b-a3de-5366eec3db90"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "16ed8dab-ee6b-44ea-8cea-31c66d6864b9"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "1a379834-6135-41e7-9cf7-e79a9f705fbc"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "2c0c5f0d-6ad7-4c97-b1a8-2c706d03a4f8"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "f967041f-20dd-4d31-a34a-f5e04bdfdf7b"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "5440d9f2-2c16-411f-8204-a206c9c20cd4"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "9f093bf8-480b-414c-a8e8-5d9c6da83576"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "056c197d-b3e0-4bae-b639-97cccbc504ef"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "6a833436-8b37-450b-9753-8cc18364fa88"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "ad0482d7-c686-4267-8b7b-352cdf811081"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "ee67405a-96ab-46be-b946-ec5875d07506"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "0e22932c-5c83-43e2-9133-8de798150a45"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "2af4e2d5-a194-4fda-9f51-273b7773809a"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "248c3593-c2fb-4734-84f8-5847c460f1d9"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "661f7562-d95a-47d4-866d-09e98860b559"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "d483fc17-c43d-4259-81c4-1668415ee2c5"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "e0e6ea1b-d3d8-4802-abd2-bf6c69f72b6f"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "049a72ba-fac1-4970-baea-d08d0abf0a99"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "ee1b9fe7-c3c5-414f-b4af-e0e8dbd5a7ab"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "8261c49a-840f-455a-be28-6df62391ec09"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "92e718ff-ce92-4562-8bf2-bbf15923034d"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "d5210d2e-261f-47b9-8fe1-d54c87e4d188"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "1e6c0ff8-36c6-48d8-8aaa-e323bda29f72"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "5ad5f7a9-940c-4f1d-b77a-d6b0028ce4e5"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "3a05a152-1218-4f2e-bc7b-af84ef60a824"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "4183ac02-58d3-4c92-9bc9-4b2ed14ec23d"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "fb57b45a-96d9-4d63-a647-b25d2791d29a"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "92f6b93e-fa07-4234-8eb6-798d555e587e"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "8265348b-1cfc-4ae1-a2b9-a340ddb7584b"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "b020bf06-0b65-4c58-943d-7b4744c747ff"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "b26b112a-40eb-48db-a71d-26ac92ea1ad9"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "a25725fa-ff4a-4054-bd35-0e251a442ab5"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "fd07e79d-a21b-42d1-aae3-02b6a3214745"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "a01769e5-9936-4aab-be50-ea37f03ab9f9"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "82c69af7-f8f5-44ee-a172-4f909c61056d"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "ae9d0e68-96ca-4731-92de-961d5ef283eb"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "3cd8820e-b1ae-49da-8211-ef45bc4fa61e"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "5aaaf791-e9a2-4ea1-94d3-d5773c53e823"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "9edc5c75-3e29-47fc-9c7c-ba1c2324d880"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "13b-45d7-45c1-a62f-c1bc7c20482d"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "b77cf13b-45d7-45c1-a62f-c1bc7c20482d"}, {"hashes": ["07d630cc0ec09159c95cd0e143814ae882d81587b7be146a4ca76a9de08e0215", "133b9577b9297ce3d9330fb2dba4c904d765d7de608cae491f4297376ad67e63", "1a52788602e6cd8128c8f520c7fe1d8f4d0def477f466f421f51cec1c7596800", "2a6acfe4f845e47435d6584c0e475ef734019d6ac8ce6013b60a6869087d5b00", "2c204bb06e4a59eb7edf50ae87e99b08857e362ff625e8cc51696e2979bf8281", "36c4ab1110858033bc056186bab5c9112300c51d3740fcb660c30a81860a53e5", "36f12d7f9dd7490fdca202d2a0a353933cd8e5b41bb733d565f071f1b17a9577", "3b24746ab542c90734a45a72d0ca9d4c2e2846ec2201ecc6321908380a80a537", "413ba9b7fe6678399136439c229aca5e91c215b110b667e2131998858a4da768", "47f7b6dd760728ac7b3e9866b0a0320cb543066d38999316e28448b7942cf009", "5ec5f731eacf9816979494df0295f77415e659e8f9e306fbc3b1ed098a48ff32", "64d801560064e4d98b3b5825e992e6933bfacc52fd1f89b3db42508bd41508e2", "68aa22252413cbbf9e3c738f89827ac7d309b7ef9f875600ea7a5d2506a01823", "6c7edd38ca40a77f03ce18a09bf78f41c27cfc9c30bdb50ffce7dc6e96c8366d", "7e0c46b8e83d0b9f5f2d39a820c1a28b2655f6dd8758b522a5f5e7124e7bf26f", "8495f059fc59f3b374f62022b3eb54b8fd2a57ddabd4208363c55c5cd0ee9c45", "92fbb185a1fc220a61eb671ea8ad6d7006b435e6eac3274107ca9cb7a8026a07", "9d34be3c772809d252189039f4e6f1a83a8c95b3e2076a8e11f23ec769d81bf6", "a20d8ffffb2608647ca1e122695a08f0dff77b7e1bcaa6e0b441421f19e0937c", "a6b72fc8c27c5578f8341d9173a305c06659975fb67e4b8e25eb699269e388f0", "c3776e7fe8640593b0bdf567befabde5491a080df87c56046ed29842c2503c1e", "c894df6e97a3f445204b40744c4f4b54073fa00e0c6771d86a91daf19611f2a0", "cca416fed2617e36a104be750a471a2381503e0e992adcd3126ad4157bb2a97f", "ccd183b7df128779f01c0471edaa75a01936358f1f567b85da2c27b4db57da9d", "cf4ce68bf578e3b757b45779685aadde75b869f8e82a1fe476acce4d5b2fb26b", "d34b976bc655f58d19a0d56927a1818e4bbcb837691678242d9ba450581f382d", "ebe883c03fa056704e726eba57f4a50c2ca4d1852593e939d0e46bd2f7c36133", "f10dfa58a153c9f21d1e96868a163fbb8302f7ee35900bd2cf8804851d69e519", "fd259828038ef734e089b021c8b91ddb1d42c920992dc55a8a949c597f13e17e"], "name": "f8f80b68-1a16-456d-ad13-e840f4f0a8e7"}, {"hashes": ["041f205d037f64240995ce8445e2d6a08df0e072cc4f6584ec1e99eeb68e9e47", "053e03f95369487d35ce6bd9d4c6c470909a4f9b1b2a62c05b1e2922f0c0e292", "0b5157e7be4ca8cbdae9474238e767631422ff6d46c93de5b08247f153aa9c18", "0f125189072bfb8379b79645abc69f19cb3e5a6ee0ccf0fd716b2ff25ca9dc43", "0f3dbd4ed64c00c733fba9b66a09b82272e0add84c6c79c26f0d24454c83939a", "1ba243aef62b1c6feed908ffc4acbcc69a9c5187fd9c500d2191d283ca475385", "373d9fe298e314a18963d440266466535130b6fde3c4ba8708fd60a36c9c6093", "3f1e1aaaaf845c3449962b2fa397b9dd576a825cfc4338ab21ad558d3d14117b", "613f577ad18d6a4d4db4af89f6ce5f1cc2d898875a7dbb278688722c0092b00f", "775af66f26c8e8eecbae07e5b4c0de80eee702219118c65eda0db0fa0a1a8cac", "8ea66270640bd35e79119ab007bb41213c4492ae9145ad4268cbfca2ee3fb7be", "9af1af950dca5a3767381ac8b1e3ce0640b1b77978332eb40f645694496c9cc8", "a40b2ec5783b6f2b7874883145c35370105be2a7298cda88473318e0b5534025", "a82999cc1c9cd0791f17a0a91653d84ac3d1e37a7b0f4d9fe32aa1cf806fd4e4", "aed4b5875d1776c8ffa179eba2d68cb066a125f91d48d5e14f23e5f3a9a3eb00", "b1e75943eb7376c73556d2703464f245516b2cf52468217b62ba3906509dc146", "b5ceda98475c8dd9d5adf50bf891ea0389c3f52e464aa07d8c5f1cc161cca676", "cec8d585c7cc27f34f1590fc019aa23912e4207ea62f9c7e1222a366b4b38c46", "d984830dab3c64d657340cd58b0bea30f072f5959c2031bb57f1f61c131ba255", "fbef09f522a9a1de6fa999a30030f9ffa043183a318666773417dff889c7a8b4"], "name": "toanhiewdong"}], "registry": []}, "reports_count": 61}, "Win.Malware.FickerStealer-9819303-1": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": []}, {"bi": "pe-section-execute-writable", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-packed-upx", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-tls-callback", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "enumeration-browser-information", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119"]}, {"bi": "windows-vault-api", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "malware-generic-infostealer", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119"]}, {"bi": "network-file-uploaded", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-communications-http-post", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": []}, {"bi": "firefox-cookie-read", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0009", "T1005", "T1119"]}, {"bi": "enumeration-vpn-program-information", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119"]}, {"bi": "network-http-numeric-ip", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "network-snort-policy", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": []}, {"bi": "pe-certificate", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": []}, {"bi": "process-check-nordvpn-files", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "mitre_attack_tags": ["TA0007"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-domain", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": []}, {"bi": "public-ip-address-identification-attempt", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "network-communications-http-get", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-file-downloaded-to-disk", "hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": []}, {"bi": "excessive-foreign-memory-modification", "hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "process-hollowing-detected", "hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-resource-lang-croatian", "hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "enumeration-cryptocurrency-information", "hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119"]}, {"bi": "enumeration-ftp-program-information", "hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1005", "T1119"]}, {"bi": "network-http-blank-user-agent", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "firefox-password-manager-local-database-access", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0006", "T1003"]}, {"bi": "feed-public-ip-check-dns", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "cmd-exe-file-deletion", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "whois-protocol-query", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "pe-encrypted-section", "hashes": ["15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "nginx-webserver-detected", "hashes": ["15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact", "hashes": ["8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de"], "mitre_attack_tags": []}, {"bi": "malware-known-trojan-av", "hashes": ["8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": []}, {"bi": "network-http-non-standard-port", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0011", "T1571"]}, {"bi": "network-opendns-malicious", "hashes": ["c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0"], "mitre_attack_tags": []}, {"bi": "process-uses-localhost-traffic", "hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0007", "T1049"]}, {"bi": "process-ping", "hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0007", "T1049"]}, {"bi": "process-ping-localhost", "hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "process-taskkill", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "geoip-ip-address-location-attempt", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "mitre_attack_tags": ["TA0007", "T1082", "T1016"]}, {"bi": "process-choice-timeout", "hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "mitre_attack_tags": ["TA0002", "T1204"]}, {"bi": "http-response-server-error", "hashes": ["15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "potential-registry-persistence", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": []}, {"bi": "registry-modification-reg", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": []}, {"bi": "excessive-process-creates", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": ["TA0040", "T1499"]}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "service-dll-registration", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": ["TA0003", "TA0004", "T1543"]}, {"bi": "html-small-file-redirect", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": []}, {"bi": "process-with-excessive-children", "hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "mitre_attack_tags": ["TA0005"]}, {"bi": "network-dns-upload-file", "hashes": ["c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d"], "mitre_attack_tags": []}, {"bi": "network-fast-flux-nameserver", "hashes": ["6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0"], "mitre_attack_tags": []}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": true, "WSA": true}, "description": "FickerStealer is a commodity infostealer malware written in Rust and sold on Russian-language hacking forums.", "hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf", "16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5", "4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "992a7b81d7adc151346c05cc17771cfec4be9efd10a52570ecf67abc5cc7f5e7", "a1de042cf7f293a150f2f54e0fb17f32b00cd6c6a51af2ab7db28320fe371b73", "a2f5fd95984cbc4252fb23a46474324b6c3b098dfaaf611b68d02e161cb1c3fc", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c", "a47bd76b1a8fad38780fb7d983d6634d565c42c6da702eb630218fcab05a2e4a", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777", "a9432f620a2df89a6ed31e791562051a505482c9d75ce848dd7f5d098a061fb7", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5", "ba371ab1fff02ba978a72b11f90335ab054e013c0c3e75f8aaa9e77e938e7981", "c30d45a309b85b010bc04905b7f43d81926a60c7e8c5f387b659517425ce083b", "c417f9be4fb16485ce056f5fc9b837b548e154b050b4a3bebc5de7c977f2563b", "c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d", "d4e3e7f2542afc581c512b7b21eced1c5c361415849f8cc74edcb5e0718d89e6", "e26a438e70ad7a31997ecbd67fe83ba1f2a1667e7562cda3877e6e3a46c33beb", "e367fb8d4d27a50a904269401c51999950474ef5b950b1dd01ec002f8143bc5e", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0", "ea5b0e0da20740f9a76ad85ce42875c09e3574a6cfbf524be20d9d95c632eff5", "ef5d53724d03a697e0a8414300f35dc2275fc39e30f6ca6e34dd5a389c139898", "fbe489617b00daa6cbf9240414af216b71f0d1594c1fe4ebccf6cc5fe9c3fa4f", "fceb4a82cf81714e77fc7396cca39eedc20f9fb1d02564ae3119a178254a1b12", "fdb8e0dc4a35e07d40b0547734529358e42f16e47c377d9d98bdbfd92599cf0c"], "iocs": {"domain": [{"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "host": "api[.]ipify[.]org"}, {"hashes": ["63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50"], "host": "elb097307-934924932[.]us-east-1[.]elb[.]amazonaws[.]com"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "host": "api[.]ip[.]sb"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "host": "whois[.]arin[.]net"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "host": "whois[.]iana[.]org"}, {"hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "host": "checkip[.]amazonaws[.]com"}, {"hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "host": "www[.]geoplugin[.]net"}, {"hashes": ["c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d"], "host": "lmdfdmserv275[.]xyz"}, {"hashes": ["6912e997963c1e8c93d3272be7f0b09b8036e12ea112663888ea3a94cd1777b0"], "host": "oribba[.]xyz"}, {"hashes": ["15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf"], "host": "jennante[.]xyz"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1"], "host": "tallipere[.]xyz"}], "file": [{"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "path": "%ProgramData%\\kaosdma.txt"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "path": "%TEMP%\\tmp<random, matching [A-F0-9]{1,4}>.tmp"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "path": "%APPDATA%\\Microsoft\\Protect\\Once"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "path": "%APPDATA%\\Microsoft\\Protect\\PREFHIST"}, {"hashes": ["0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81"], "path": "%ProgramData%\\s7r8y2v9v8r8y2v9v8\\softokn3.dll"}, {"hashes": ["0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81"], "path": "%ProgramData%\\s7r8y2v9v8r8y2v9v8\\vcruntime140.dll"}, {"hashes": ["674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338"], "path": "%ProgramData%\\s8v0x2v3v8v0x2v3v8\\freebl3.dll"}, {"hashes": ["674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338"], "path": "%ProgramData%\\s8v0x2v3v8v0x2v3v8\\mozglue.dll"}, {"hashes": ["674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338"], "path": "%ProgramData%\\s8v0x2v3v8v0x2v3v8\\msvcp140.dll"}, {"hashes": ["674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338"], "path": "%ProgramData%\\s8v0x2v3v8v0x2v3v8\\nss3.dll"}, {"hashes": ["674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338"], "path": "%ProgramData%\\s8v0x2v3v8v0x2v3v8\\softokn3.dll"}, {"hashes": ["674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338"], "path": "%ProgramData%\\s8v0x2v3v8v0x2v3v8\\vcruntime140.dll"}, {"hashes": ["5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "path": "%ProgramData%\\s8y8w9x3p5y8w9x3p5\\freebl3.dll"}, {"hashes": ["8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db"], "path": "%ProgramData%\\s8p4p5w8r0p4p5w8r0\\freebl3.dll"}, {"hashes": ["5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "path": "%ProgramData%\\s8y8w9x3p5y8w9x3p5\\mozglue.dll"}, {"hashes": ["8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db"], "path": "%ProgramData%\\s8p4p5w8r0p4p5w8r0\\mozglue.dll"}, {"hashes": ["5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "path": "%ProgramData%\\s8y8w9x3p5y8w9x3p5\\msvcp140.dll"}, {"hashes": ["8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db"], "path": "%ProgramData%\\s8p4p5w8r0p4p5w8r0\\msvcp140.dll"}, {"hashes": ["5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "path": "%ProgramData%\\s8y8w9x3p5y8w9x3p5\\nss3.dll"}, {"hashes": ["8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db"], "path": "%ProgramData%\\s8p4p5w8r0p4p5w8r0\\nss3.dll"}, {"hashes": ["5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "path": "%ProgramData%\\s8y8w9x3p5y8w9x3p5\\softokn3.dll"}, {"hashes": ["8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db"], "path": "%ProgramData%\\s8p4p5w8r0p4p5w8r0\\softokn3.dll"}, {"hashes": ["8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db"], "path": "%ProgramData%\\s8p4p5w8r0p4p5w8r0\\vcruntime140.dll"}, {"hashes": ["5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18"], "path": "%ProgramData%\\s8y8w9x3p5y8w9x3p5\\vcruntime140.dll"}, {"hashes": ["63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147"], "path": "%ProgramData%\\s9w4r2q7v7w4r2q7v7\\freebl3.dll"}, {"hashes": ["63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147"], "path": "%ProgramData%\\s9w4r2q7v7w4r2q7v7\\mozglue.dll"}, {"hashes": ["63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147"], "path": "%ProgramData%\\s9w4r2q7v7w4r2q7v7\\msvcp140.dll"}, {"hashes": ["63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147"], "path": "%ProgramData%\\s9w4r2q7v7w4r2q7v7\\nss3.dll"}, {"hashes": ["63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147"], "path": "%ProgramData%\\s9w4r2q7v7w4r2q7v7\\softokn3.dll"}, {"hashes": ["63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147"], "path": "%ProgramData%\\s9w4r2q7v7w4r2q7v7\\vcruntime140.dll"}, {"hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70"], "path": "%ProgramData%\\s8y8v4w9v7y8v4w9v7\\freebl3.dll"}, {"hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70"], "path": "%ProgramData%\\s8y8v4w9v7y8v4w9v7\\mozglue.dll"}, {"hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70"], "path": "%ProgramData%\\s8y8v4w9v7y8v4w9v7\\msvcp140.dll"}, {"hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70"], "path": "%ProgramData%\\s8y8v4w9v7y8v4w9v7\\nss3.dll"}, {"hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70"], "path": "%ProgramData%\\s8y8v4w9v7y8v4w9v7\\softokn3.dll"}, {"hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70"], "path": "%ProgramData%\\s8y8v4w9v7y8v4w9v7\\vcruntime140.dll"}, {"hashes": ["108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297"], "path": "%ProgramData%\\s9w4q4u4t0w4q4u4t0\\freebl3.dll"}, {"hashes": ["108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297"], "path": "%ProgramData%\\s9w4q4u4t0w4q4u4t0\\mozglue.dll"}, {"hashes": ["108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297"], "path": "%ProgramData%\\s9w4q4u4t0w4q4u4t0\\msvcp140.dll"}, {"hashes": ["108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297"], "path": "%ProgramData%\\s9w4q4u4t0w4q4u4t0\\nss3.dll"}, {"hashes": ["108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297"], "path": "%ProgramData%\\s9w4q4u4t0w4q4u4t0\\softokn3.dll"}, {"hashes": ["108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297"], "path": "%ProgramData%\\s9w4q4u4t0w4q4u4t0\\vcruntime140.dll"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "path": "%APPDATA%\\Microsoft\\Protect\\5d1ae8-54b4d1-b241b752-78ced0-f0a0.db"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "path": "%APPDATA%\\Microsoft\\Protect\\aec529-acc529-bd13d704-cfa8d1-add0.db"}, {"hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352"], "path": "%ProgramData%\\t1t3w9t4t3t3w9t4t3\\freebl3.dll"}, {"hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352"], "path": "%ProgramData%\\t1t3w9t4t3t3w9t4t3\\mozglue.dll"}, {"hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352"], "path": "%ProgramData%\\t1t3w9t4t3t3w9t4t3\\msvcp140.dll"}, {"hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352"], "path": "%ProgramData%\\t1t3w9t4t3t3w9t4t3\\nss3.dll"}, {"hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352"], "path": "%ProgramData%\\t1t3w9t4t3t3w9t4t3\\softokn3.dll"}, {"hashes": ["7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352"], "path": "%ProgramData%\\t1t3w9t4t3t3w9t4t3\\vcruntime140.dll"}], "ip": [{"hashes": ["0b2912254415369ba173ffd6cc6fd7e36f36213af815f742ef7355cf2b90de70", "0cf759e84869d51a965c314d25d91910812381f44503de2fe00186cc137c7d81", "108565e95c7741954e78ba0d9a4d4f5c2802354468acd4ebf40cdbcdc4cc5297", "156e73756bf43eb9ee514dfb4258129f2c5f8890e960023ea9fcd148d73486c4", "1f6d0a74e3c9ab7b4fa94960b61f0abd81a9545273389a482f396c7a77c20a19", "2250e4939f282894313e84ea1595dc312791a5301f0452f55a573039cf3815c3", "5106598337fc2af29e0d03cd72651dc0373e390453e26100f9d3cfbd52387d18", "63d4fa397b3b294e145968a0f90dd6237e557ece059a2b78547a1f862af83147", "64eaa2aa7b575c37c74dbff88a0e4b67c3f2aed7f6b89bd107f39141f0cf02c2", "674f30cc21a0790ebf32af6876c8eef7efbba7daf458ba8aef719408832c9338", "7e4f06d93d9bb99cc6b3c893f1b3eb406bb62a3326bfed89d76b6eabdcde990b", "7eea90f98488448767a72df890cb7f23ed40aeac937a32642bd72cf60f202352", "8ef14192d1a811a59e27bb697dbece52b3f630b5c0d69910c9d4540cfaa118db", "a5d9e146a4fa2e1b56c58a3c44350fd008d4fb5c0b2466109c186fe1fd3c3777"], "ip": "195[.]2[.]74[.]126"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "ip": "195[.]2[.]81[.]120"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7"], "ip": "50[.]19[.]243[.]236"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "ip": "192[.]0[.]47[.]59"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "ip": "199[.]71[.]0[.]46"}, {"hashes": ["7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "ip": "104[.]26[.]13[.]31"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278"], "ip": "54[.]221[.]253[.]252"}, {"hashes": ["7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160", "b5edc93c2e6dd8a1f39ad8c56261a3a26d154c806289e89cdde983b323c08ac5"], "ip": "93[.]115[.]18[.]170"}, {"hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7"], "ip": "93[.]114[.]128[.]19"}, {"hashes": ["63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287"], "ip": "194[.]99[.]20[.]177"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "ip": "172[.]217[.]12[.]206"}, {"hashes": ["7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "ip": "199[.]212[.]0[.]46"}, {"hashes": ["7482f5805808c17c3d8224a0854f25fd79f90bcda5321ae49c6c9810c9605160"], "ip": "192[.]0[.]32[.]59"}, {"hashes": ["90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7"], "ip": "54[.]225[.]66[.]103"}, {"hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "ip": "178[.]237[.]33[.]50"}, {"hashes": ["63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c"], "ip": "54[.]235[.]83[.]248"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1"], "ip": "172[.]67[.]75[.]172"}, {"hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "ip": "23[.]21[.]27[.]29"}, {"hashes": ["97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50"], "ip": "54[.]243[.]164[.]148"}, {"hashes": ["63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c"], "ip": "23[.]21[.]42[.]25"}, {"hashes": ["7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287"], "ip": "54[.]243[.]119[.]179"}, {"hashes": ["c84ff476cc12c4e61b5d5ff68c0aea245f718657cc6a148dc1104544836d041d"], "ip": "185[.]150[.]117[.]41"}, {"hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566"], "ip": "54[.]235[.]189[.]250"}, {"hashes": ["e4d2f5cba43a7f5f63e4dcfa1ddaacd8936e90ba36e602a0f8fc0479fb47abd0"], "ip": "195[.]2[.]92[.]125"}, {"hashes": ["831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566"], "ip": "23[.]21[.]140[.]41"}, {"hashes": ["15759d1074ad9603fe637e83e453f4fc0d44f5983887d23b17d2236ccf8215cf"], "ip": "94[.]140[.]115[.]81"}, {"hashes": ["16948f00f5875f5e7440922233d4a0aa02236c829a6ebc3b19853cc3a91f21c1"], "ip": "94[.]140[.]115[.]156"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "ip": "109[.]236[.]88[.]152"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "ip": "96[.]43[.]128[.]70"}], "mutex": [{"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "name": "hrth"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "name": "whoareyoutellmeandilltellwhoyou"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "name": "ah;waeh;jftyjftyjfiftfdgaf"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "name": "hotyjftyj;afdh"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "name": "ijlhlkwaftyjftyjftjftyh;joi;i"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "name": "o;jtfytyjftyjftyjftyj;ijo;"}, {"hashes": ["4fe78a3eac1b4a1dce616b3fc39fa174c8b112d681edb5985243be24cd0724de", "63d1f8f4ca47893ca7638bc49e5ab48cfd14203a9c7acd8774c497bdc9887e6c", "7920398ae747e67aca018921e6c1584abb3cd6f7ad4bf4d47f51bff071bf8287", "831447cbcd8817ded39594bfc10383e3cd8b4d0efa7e5346d3bec67543a8e566", "8536077bc00de4f9544abb3c3b299cf6cc11e813f649dcc53c382306bd0a5278", "90609ab4a6ca57cfef46702d027a94733ffdb7ad35c6aeeae5d4beede3033de7", "97a267b363b9621d1cc69fa705f89cb0f353ebda1b117f2ed4edd39dc342ee50", "a2f8403d23e19ebb7bfd9f3dcadfd184f9a6bf867177e70c10f8af9200bacc5c"], "name": "whftyjftyjftyjtfyjtfyjtfyj;ijo;h"}], "registry": [{"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN", "value_name": "LanguagePack"}, {"hashes": ["2ba751611d815dc342a32712610f7fabe78e34780c35e4145879645529810ab5"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "LanguagePack"}]}, "reports_count": 30}, "Win.Malware.Redline-9819608-1": {"bis": [{"bi": "memory-execute-readwrite", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "network-fast-flux-domain", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "feed-domain-antivirus-service", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": []}, {"bi": "network-http-blank-user-agent", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "http-response-server-error", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": []}, {"bi": "malware-redline-network-activity", "hashes": ["99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20"], "mitre_attack_tags": ["TA0002", "TA0005", "T1059", "T1070"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Redline Stealer is an information-stealer written in .NET and sold on hacking forums.", "hashes": ["11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063"], "iocs": {"domain": [{"hashes": ["11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063"], "host": "longwhitelice[.]cyou"}], "file": [{"hashes": ["11bcab49e564310f5137a9b638bb1ead9ea4028e67ec802d45c811686987ab23", "3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "8be12c2f0a37e68f263de19b06095020562903c83426babb1e724034e3db8c36", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "bed7057aaac834046123cff7d683ed732af201c890b68fc40901a9e1af2a86ae", "ce38bed65320a0149f1792d5667a3a5c60939f34aee97717167ccb9b504dfde2", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}], "ip": [{"hashes": ["4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "542e8b2a3dc3d972ba5cfb92c44858513c520581a95eeb92d1597707554531a0", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "a411474abab8d40856f636addf0d619dda7f38524bbbcbd441dec955189eba74", "e6d402a709bcbfec6628b8e4ecdc8828ff28f8ef1f9ecc041d17160cc8b5a859", "e99a3bab431d695d60e2a588c24424e5c9de525c774f8ae09ecc85f495ddcf20", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a", "f90e4be8b5208be16eac10a9287f33422f869fecf036011a73fd0001a8caa063"], "ip": "172[.]67[.]219[.]232"}, {"hashes": ["3af849f44fc729ecb867eefc88181ed5675a72d5cbfe736e5dc63e129e51e2a3", "4b615d44ac84e330135132d0ff062ba98cb8fe732f2e2b6d2e6020012f0fc2f2", "96831d9c6375ec9b80ef3fa55342320442b8517830858c41d548fc0f7891cc7e", "99906bef27e8c3ad2639430c820319224742e5bf8f72338de3767be5812ebe20", "ae8d0276030d8012703f9f0a8a6a1bd04d5eb9265f77eaf5e230c62807fc8c2f", "b6602a904550cc5d953aaa241665e10f402c74c3ba0ddd5219360d5d8704dac0", "f6e29141a3a658983b3ea700f34cb10d1231e9781e2fe26206883f783cc95d0a"], "ip": "104[.]21[.]24[.]187"}], "mutex": [], "registry": []}, "reports_count": 16}, "Win.Malware.Tofsee-9819431-1": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "pe-invalid-checksum", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "registry-service-with-autostart-created", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112"]}, {"bi": "currentcontrolset-service-added", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1547"]}, {"bi": "process-long-cmdline", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-communications-smtp", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "dns-query-nxdomain", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-smtp-spambot", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "process-requested-named-pipe", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "excessive-foreign-memory-modification", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "deleted-submitted-file", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "listening-port-opened", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "localhost-ipaddress-detected", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "registry-large-data-entry", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "T1112"]}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "sc-service-start", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1543"]}, {"bi": "netbios-null-domain", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "file-alternate-data-stream-modification", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005"]}, {"bi": "malware-tofsee-cmd-detected", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "netsh-firewall-generic", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0007", "TA0005", "T1016", "T1562"]}, {"bi": "sc-service-create", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0003", "TA0004", "T1543"]}, {"bi": "file-alternate-data-stream-creation", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005"]}, {"bi": "new-service-launched", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0002"]}, {"bi": "registry-windows-defender-exclusions-added", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "dns-bypassed-assigned-server", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0011", "TA0005"]}, {"bi": "netsh-firewall-add", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "malware-tofsee-domain-detected", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "malware-tofsee-filepath", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0011", "TA0005", "T1105", "T1112"]}, {"bi": "sc-service-create-execute", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1543"]}, {"bi": "zen-spamhaus-domain-contacted", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "process-svchost-suspicious-launch", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0005", "T1036"]}, {"bi": "malware-compound-cta-activity", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-smtp-spambot-v2", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-snort-sensitive-data", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "network-dns-category-file-storage", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": []}, {"bi": "dns-excessive-domain-queries", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "mitre_attack_tags": ["TA0011", "T1008"]}, {"bi": "double-url-detected", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "excessive-tcp-connections", "hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}, {"bi": "http-response-redirect", "hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a"], "mitre_attack_tags": []}, {"bi": "html-small-file-redirect", "hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a"], "mitre_attack_tags": []}, {"bi": "network-snort-server", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0"], "mitre_attack_tags": []}, {"bi": "network-file-uploaded", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "mitre_attack_tags": ["TA0010", "T1011"]}, {"bi": "nginx-webserver-detected", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-http-non-standard-port", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "mitre_attack_tags": ["TA0011", "T1571"]}, {"bi": "windows-utility-downloaded-artifact", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "suspicious-user-agent", "hashes": ["e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "mitre_attack_tags": ["TA0011", "T1071"]}, {"bi": "eml-mismatched-name-from-header", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8"], "mitre_attack_tags": ["TA0001"]}, {"bi": "process-av-strings", "hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "feed-domain-ransomware", "hashes": ["68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730"], "mitre_attack_tags": []}, {"bi": "network-discord-domain-detected", "hashes": ["68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "js-calls-activex-object", "hashes": ["36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f"], "mitre_attack_tags": ["TA0005", "T1202"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Tofsee is multi-purpose malware that differet modules used to carry out various activities such as sending spam messages, conducting click fraud, mining cryptocurrency and more. Infected systems become part of the Tofsee spam botnet and are used to send large volumes of spam messages to infect additional systems and increase the overall size of the botnet under the operator\u2019s control. ", "hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "ec9c706544937123599b751df27b3d7d2351e810c7956ef19101f74fab310970", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fcc4073e248a48503ff85ebd0850e430b403624e6d36b5020201e3baf542e580", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "iocs": {"domain": [{"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "249[.]5[.]55[.]69[.]bl[.]spamcop[.]net"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "249[.]5[.]55[.]69[.]cbl[.]abuseat[.]org"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "249[.]5[.]55[.]69[.]dnsbl[.]sorbs[.]net"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "249[.]5[.]55[.]69[.]in-addr[.]arpa"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "249[.]5[.]55[.]69[.]sbl-xbl[.]spamhaus[.]org"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "249[.]5[.]55[.]69[.]zen[.]spamhaus[.]org"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "microsoft-com[.]mail[.]protection[.]outlook[.]com"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "schema[.]org"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "host": "msr[.]pool-pay[.]com"}, {"hashes": ["359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "api[.]sendspace[.]com"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03"], "host": "ip[.]pr-cy[.]hacklix[.]com"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "host": "market[.]yandex[.]ru"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "work[.]a-poster[.]info"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "host": "www[.]amazon[.]com"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "host": "119[.]151[.]167[.]12[.]in-addr[.]arpa"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "host": "d3ag4hukkh62yn[.]cloudfront[.]net"}, {"hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e"], "host": "iv0001-npxs01001-00[.]auth[.]np[.]ac[.]playstation[.]net"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "host": "www[.]google[.]es"}, {"hashes": ["36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "host": "www[.]google[.]de"}, {"hashes": ["694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "host": "www[.]google[.]nl"}, {"hashes": ["68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "host": "www[.]google[.]co[.]in"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0"], "host": "www[.]walmart[.]com"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728"], "host": "www[.]google[.]se"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a"], "host": "www[.]google[.]it"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "host": "www[.]google[.]ca"}, {"hashes": ["359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9"], "host": "www[.]google[.]co[.]uk"}, {"hashes": ["68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7"], "host": "www[.]sendspace[.]com"}, {"hashes": ["190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0"], "host": "native-ps3[.]np[.]ac[.]playstation[.]net"}, {"hashes": ["190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a"], "host": "www[.]google[.]com[.]tr"}, {"hashes": ["54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7"], "host": "www[.]google[.]com[.]au"}, {"hashes": ["190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6"], "host": "120[.]151[.]167[.]12[.]in-addr[.]arpa"}, {"hashes": ["6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6"], "host": "e15316[.]e22[.]akamaiedge[.]net"}, {"hashes": ["3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a"], "host": "app[.]snapchat[.]com"}, {"hashes": ["7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03"], "host": "video-weaver[.]lax03[.]hls[.]ttvnw[.]net"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03"], "host": "www[.]google[.]com[.]ua"}, {"hashes": ["c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43"], "host": "www[.]google[.]be"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0"], "host": "117[.]151[.]167[.]12[.]in-addr[.]arpa"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "host": "www[.]google[.]co[.]jp"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f"], "host": "www[.]google[.]ru"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7"], "host": "www[.]google[.]ro"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "host": "www[.]google[.]co[.]kr"}, {"hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156"], "host": "j[.]sni[.]global[.]fastly[.]net"}, {"hashes": ["2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a"], "host": "www[.]footshop[.]eu"}, {"hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156"], "host": "www[.]footlocker[.]nl"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7"], "host": "www[.]google[.]fr"}, {"hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325"], "host": "e6225[.]x[.]akamaiedge[.]net"}, {"hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325"], "host": "sso[.]godaddy[.]com"}, {"hashes": ["64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325"], "host": "m[.]jdsports[.]it"}, {"hashes": ["54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "host": "www[.]bhphotovideo[.]com[.]cdn[.]cloudflare[.]net"}, {"hashes": ["54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9"], "host": "www[.]bhphotovideo[.]com"}], "file": [{"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "path": "%SystemRoot%\\SysWOW64\\config\\systemprofile"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "path": "%SystemRoot%\\SysWOW64\\config\\systemprofile:.repos"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "path": "%SystemRoot%\\SysWOW64\\<random, matching '[a-z]{8}'>"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "path": "%TEMP%\\<random, matching '[a-z]{8}'>.exe"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "path": "%System32%\\config\\systemprofile:.repos"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7"], "path": "%System32%\\<random, matching '[a-z]{8}\\[a-z]{6,8}'>.exe (copy)"}, {"hashes": ["f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "path": "%TEMP%\\tvqwpcm.exe"}, {"hashes": ["190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8"], "path": "%TEMP%\\cezfylv.exe"}, {"hashes": ["36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a"], "path": "%TEMP%\\ikflerb.exe"}, {"hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a"], "path": "%TEMP%\\gidjcpz.exe"}, {"hashes": ["714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a"], "path": "%System32%\\beyeagh\\gidjcpz.exe (copy)"}, {"hashes": ["68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730"], "path": "%System32%\\vtrnuzt\\omvwfbqm.exe (copy)"}, {"hashes": ["7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "path": "%System32%\\sbrjqyv\\ulhofeim.exe (copy)"}], "ip": [{"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "239[.]255[.]255[.]250"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "69[.]55[.]5[.]249"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "104[.]47[.]53[.]36"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "157[.]240[.]2[.]174"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "5[.]9[.]72[.]48"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "217[.]172[.]179[.]54"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "130[.]0[.]232[.]208"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "144[.]76[.]108[.]82"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "185[.]253[.]217[.]20"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "45[.]90[.]34[.]87"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "31[.]13[.]71[.]174"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "176[.]9[.]119[.]47"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "43[.]231[.]4[.]7"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "185[.]254[.]190[.]218"}, {"hashes": ["359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "69[.]31[.]136[.]5"}, {"hashes": ["2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e"], "ip": "104[.]47[.]54[.]36"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "172[.]217[.]197[.]106"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "172[.]217[.]197[.]147"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "ip": "172[.]217[.]12[.]196"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03"], "ip": "157[.]240[.]18[.]174"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "47[.]43[.]26[.]7"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03"], "ip": "163[.]172[.]32[.]74"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "ip": "87[.]250[.]250[.]22"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "67[.]195[.]204[.]72/30"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "172[.]217[.]197[.]103"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "172[.]217[.]197[.]99"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03"], "ip": "172[.]217[.]165[.]132"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728"], "ip": "216[.]239[.]38[.]21"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "67[.]195[.]228[.]110/31"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "37[.]1[.]217[.]172"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "209[.]85[.]233[.]26/31"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "ip": "216[.]239[.]32[.]21"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "12[.]167[.]151[.]119"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "74[.]125[.]28[.]26/31"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "67[.]195[.]228[.]84"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868"], "ip": "74[.]125[.]133[.]26/31"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728"], "ip": "188[.]125[.]72[.]73"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "98[.]136[.]96[.]92/31"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "67[.]195[.]228[.]109"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728"], "ip": "212[.]227[.]17[.]4/31"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8"], "ip": "74[.]208[.]5[.]20/31"}, {"hashes": ["36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "212[.]227[.]15[.]40/31"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868"], "ip": "104[.]47[.]22[.]161"}, {"hashes": ["36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728"], "ip": "3[.]223[.]115[.]185"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "ip": "51[.]81[.]57[.]58/31"}, {"hashes": ["36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728"], "ip": "142[.]250[.]4[.]26/31"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868"], "ip": "206[.]152[.]134[.]65"}, {"hashes": ["36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868"], "ip": "67[.]195[.]228[.]86"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "ip": "172[.]217[.]197[.]104/31"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868"], "ip": "68[.]87[.]20[.]5"}], "mutex": [], "registry": [{"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Type"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Start"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ErrorControl"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "DisplayName"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "WOW64"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ObjectName"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "Description"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": null}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": null}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": "Config2"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": "Config0"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325", "68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKU>\\.DEFAULT\\CONTROL PANEL\\BUSES", "value_name": "Config1"}, {"hashes": ["190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8", "2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3", "36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0", "694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156", "6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868", "7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e", "ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e", "e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728", "f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\<random, matching '[A-Z0-9]{8}'>", "value_name": "ImagePath"}, {"hashes": ["68e52283e52ad93b8769cce40a9d948908ba3276a26037160163bfc76aed6730", "d3c2c954d695ca5ae886aa1239de5b055550840107c37410e1d3397abee0274e", "fd316bf941cc8c95950014d588f538823434c8fece6cb876c92108bec9bab347"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\gzntsagv"}, {"hashes": ["2cc9f1ddcedc781d039edac5a9f5389b65b0b7faaf50da0322ccbebc16b84d2b", "36f9410a9790af54b0c9a890fc2bb9158212f92663c12179aaf0d7cda28cce8a", "715dfee4ece1c24ef3b17957e3af3ca8e880e1afe8eed38c8f62e22f996e63e6"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\jcqwvdjy"}, {"hashes": ["54af3997de833515af5de6eaa0f7244595161e1826ee3e6b545fad5ffaec12b9", "714d78ce37a800894ccabb97de96b493d175e4e2c0be9690c27e6db1962b407a", "c751cfa2c323292e85f3ea3144a1f66ef5eb61005891aba403c8d60f7c5de6a7"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\xqekjrxm"}, {"hashes": ["3be1a6c30364eeeac74e64b281a524749aa8dce908bffe41d7f5b3113975ba75", "7304fa5629bacc1356b2d56e3a594f6e938b89b8e51197b8c9572babff57d868"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\unbhgouj"}, {"hashes": ["28802e8e05dffead15c34bfefc62f292edf1aef2296e61b8cef5f1a0c77c6799", "d888a7604a2cb6941f738a173b89aabaa6c33d6536300307d2b643aa92f29b43"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\haoutbhw"}, {"hashes": ["2359f3547a13a3cfc5c91a1f96cecb789fe9c0348ed5d28d4e27cc27c905413f", "64b46abeca0ad9e783811a9fffd330229e5b43fcd44d80d9bd2f4ab3cb8f5325"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\athnmuap"}, {"hashes": ["0fc78609bf9010369a7ce4af472363a3fd4f0f5236e1e286d890ef44681e36b7", "6d85bbed5fafd7b15e04e4378e85bf95a34ae6628f75810fe8af0f6ced2d1ff8"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\tmagfnti"}, {"hashes": ["36f13ba2e0ac7c19e0594cb0f48ebabbf0ca2690def1564e0a0d23b36d2fda7f", "f16a7c1ddb4b77832c84223301fb73efe923e767a2d8cc03ee18004d5fbc3728"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\piwcbjpe"}, {"hashes": ["7a1c23fefa1f7679186400d168d1d39a3e3b969521af9eedf20eec7c50b8dfb7", "e8cad20fc2703b4f375c8b0e9acf19f22278239afba20269a782e6821209430e"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\slzfemsh"}, {"hashes": ["003f4e0f105169a5cf0e772718728b430c897fc83b9f5738b35dd7163680707a", "190e4a1584728b3e1ba15794530ca6927d338e5a5ede8e0c54f8ffea706affc8"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\qjxdckqf"}, {"hashes": ["6c02a2a3672cc18a30d542e5882ff82767ff34c181efbb709ebdbd2fc707cf3a", "79aa9ba38068ca0b1eb6882e28c8169bd1fbac1ae691a8665a53d95cc71f51a0"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\ohvbaiod"}, {"hashes": ["725b286a9d16d2a077f8188930c0ed225ad7801746bd94994884085a69f231d9"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\exlrqyet"}, {"hashes": ["e93f99946b7b3e24f1b0f0b3d0b0cb10f1473d4438871e6edb9bb7be8cb05c03"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\nguazhnc"}, {"hashes": ["359c52e1098060c7931ce5d336f636f8ee7499d863d4bcc7bd77c2b7c0289ff3"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\wpdjiqwl"}, {"hashes": ["6cee45ce3d918a417a8ef184309c08ae7db537bcc05e38a2ff0c9b8a536b864a"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\buionvbq"}, {"hashes": ["7a9606c0f24b92126ef2f3d9b618f3ab9314b479d58c8525c1046c4f6cf21e1e"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\rkyedlrg"}, {"hashes": ["591bf1855957fbbf960c547186d7b645b7676c6cc883798230190d2da49c19e0"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\vocihpvk"}, {"hashes": ["f1cbee11e69bbb83a975a8a79691168b09c73edda5fea9eda8c15f378b87699e"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\fymsrzfu"}, {"hashes": ["ddb0a923640e82e5db6c57147551f2d64cda2d1fba2a90b5a134ea926c002535"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\mftzygmb"}, {"hashes": ["694d0d490e1ec0a1ab62d962ddb13f8e008843ccf3f292dfac2b8f1d45eaf156"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS DEFENDER\\EXCLUSIONS\\PATHS", "value_name": "C:\\Windows\\SysWOW64\\cvjpowcr"}]}, "reports_count": 34}, "Win.Malware.Zegost-9819547-0": {"bis": [{"bi": "antivirus-service-flagged-artifact", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168", "43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "2ae5c5b742586bcf88cb1d7c8df12c72a6a49a3df281fc5a2dd0bdbc8a365177", "231ee6de5b09fe471d9dffacde6302e7617ff5df8518fde3d8f13b34c10a8abd", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "0e4e60751074fa387946051f6e604d8727b55e7180d607d9b22242e2a85e92a4", "0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "522ed8df43739cf35d5ea2a883aba86054b1f16e27c6ba8667e0906daa22c295", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "1c831609051813f8a5f53999db590270c9126b2875bb47025810c9890cb6ffb0", "5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "3c83d0237d6bd96e1018cc14167b2eb43b6939b5a219ffdc849da3c540f9457e", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "1f3cb94fe40d095029ebb84a13baf98e0a471c48aa8595f549106526dbddadd8", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168", "43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "2ae5c5b742586bcf88cb1d7c8df12c72a6a49a3df281fc5a2dd0bdbc8a365177", "231ee6de5b09fe471d9dffacde6302e7617ff5df8518fde3d8f13b34c10a8abd", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "0e4e60751074fa387946051f6e604d8727b55e7180d607d9b22242e2a85e92a4", "0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "522ed8df43739cf35d5ea2a883aba86054b1f16e27c6ba8667e0906daa22c295", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "1c831609051813f8a5f53999db590270c9126b2875bb47025810c9890cb6ffb0", "5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "3c83d0237d6bd96e1018cc14167b2eb43b6939b5a219ffdc849da3c540f9457e", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "1f3cb94fe40d095029ebb84a13baf98e0a471c48aa8595f549106526dbddadd8", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "pe-imports-toolhelp", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168", "43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "2ae5c5b742586bcf88cb1d7c8df12c72a6a49a3df281fc5a2dd0bdbc8a365177", "231ee6de5b09fe471d9dffacde6302e7617ff5df8518fde3d8f13b34c10a8abd", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "0e4e60751074fa387946051f6e604d8727b55e7180d607d9b22242e2a85e92a4", "0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "522ed8df43739cf35d5ea2a883aba86054b1f16e27c6ba8667e0906daa22c295", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "1c831609051813f8a5f53999db590270c9126b2875bb47025810c9890cb6ffb0", "5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "3c83d0237d6bd96e1018cc14167b2eb43b6939b5a219ffdc849da3c540f9457e", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "1f3cb94fe40d095029ebb84a13baf98e0a471c48aa8595f549106526dbddadd8", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "memory-execute-readwrite", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168", "43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "2ae5c5b742586bcf88cb1d7c8df12c72a6a49a3df281fc5a2dd0bdbc8a365177", "231ee6de5b09fe471d9dffacde6302e7617ff5df8518fde3d8f13b34c10a8abd", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "522ed8df43739cf35d5ea2a883aba86054b1f16e27c6ba8667e0906daa22c295", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "1c831609051813f8a5f53999db590270c9126b2875bb47025810c9890cb6ffb0", "5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "3c83d0237d6bd96e1018cc14167b2eb43b6939b5a219ffdc849da3c540f9457e", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "1f3cb94fe40d095029ebb84a13baf98e0a471c48aa8595f549106526dbddadd8", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "pe-uses-armadillo", "hashes": ["2ae5c5b742586bcf88cb1d7c8df12c72a6a49a3df281fc5a2dd0bdbc8a365177", "231ee6de5b09fe471d9dffacde6302e7617ff5df8518fde3d8f13b34c10a8abd", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "0e4e60751074fa387946051f6e604d8727b55e7180d607d9b22242e2a85e92a4", "0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "522ed8df43739cf35d5ea2a883aba86054b1f16e27c6ba8667e0906daa22c295", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "1c831609051813f8a5f53999db590270c9126b2875bb47025810c9890cb6ffb0", "5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "3c83d0237d6bd96e1018cc14167b2eb43b6939b5a219ffdc849da3c540f9457e", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "1f3cb94fe40d095029ebb84a13baf98e0a471c48aa8595f549106526dbddadd8", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "modified-executable", "hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "registry-service-with-autostart-created", "hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112"]}, {"bi": "currentcontrolset-service-added", "hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1547"]}, {"bi": "deleted-submitted-file", "hashes": ["43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "process-windows-script-launched", "hashes": ["43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "files-deleted-used-vbs", "hashes": ["43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "new-service-launched", "hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0002"]}, {"bi": "modified-file-in-program-dir", "hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["0e4e60751074fa387946051f6e604d8727b55e7180d607d9b22242e2a85e92a4", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-antianalysis", "hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "1f3cb94fe40d095029ebb84a13baf98e0a471c48aa8595f549106526dbddadd8", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "pe-filename-mismatch", "hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "mitre_attack_tags": []}, {"bi": "malicious-domain-contacted", "hashes": ["773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": ["TA0011"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "dns-dynamic-domain", "hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021"], "mitre_attack_tags": ["TA0011"]}, {"bi": "network-private-ip-address", "hashes": ["503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "mitre_attack_tags": []}, {"bi": "pe-dos-header-pages", "hashes": ["503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "modified-file-in-system-dir", "hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168"], "mitre_attack_tags": []}, {"bi": "windows-crash-tool-execution-detected", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168"], "mitre_attack_tags": []}, {"bi": "crash-dump-file-created", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168"], "mitre_attack_tags": []}, {"bi": "fault-report-file-created", "hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168"], "mitre_attack_tags": []}, {"bi": "pe-dos-header-relocations", "hashes": ["503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-autorun-key-system-dir", "hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "network-dns-category-dynamic", "hashes": ["4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3"], "mitre_attack_tags": []}, {"bi": "netbios-query", "hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-modified", "hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "deleted-executable-in-system-dir", "hashes": ["78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b"], "mitre_attack_tags": []}, {"bi": "network-snort-indicator-compromise", "hashes": ["003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021"], "mitre_attack_tags": []}, {"bi": "artifact-exec-extension-obfuscation", "hashes": ["003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021"], "mitre_attack_tags": ["TA0005", "T1027"]}], "category": "Malware", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Zegost, also known as Zusy, uses man-in-the-middle attacks to steal banking information. When executed, it injects itself into legitimate Windows processes such as \"explorer.exe\" and \"winver.exe\". When the user accesses a banking website, it displays a form to trick the user into submitting personal information.", "hashes": ["003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "0e4e60751074fa387946051f6e604d8727b55e7180d607d9b22242e2a85e92a4", "1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "1c831609051813f8a5f53999db590270c9126b2875bb47025810c9890cb6ffb0", "1f3cb94fe40d095029ebb84a13baf98e0a471c48aa8595f549106526dbddadd8", "231ee6de5b09fe471d9dffacde6302e7617ff5df8518fde3d8f13b34c10a8abd", "2ae5c5b742586bcf88cb1d7c8df12c72a6a49a3df281fc5a2dd0bdbc8a365177", "2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168", "324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde", "3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812", "370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "3c83d0237d6bd96e1018cc14167b2eb43b6939b5a219ffdc849da3c540f9457e", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae", "44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942", "4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "522ed8df43739cf35d5ea2a883aba86054b1f16e27c6ba8667e0906daa22c295", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "586f43a91952161a476787f4c7da9211b59e9281ea9ee497b8695f98d7107781", "5b4a6fc4ba34a0ebceead5c55a77f99fc8530a641c72e87a3085e93b5ae3d659", "5b55567346bb126756b18fa504c9ddd6afc383ffb2d1b5eb1571531c2d288705", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "6051ec0150f056c043aeb04658afe2b1dc8137e4fb2aaf423d79a812a5439a14", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946", "651ab9d3a962becaaeda598d54a147373aa87007831b585c05a14ad7979f02e3", "67d21d4004271befc842f9eacb0985917db55e7fabbcf5e5e5b9b558b757f7db", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "6dc5a3c7ced34b848cf079b0391367ca25c223559f748fdadfaaadd8eecc2414", "7146a3e6a3707c881e7d38000ddb7085ea07b9ded138d70793899e3beec4c940", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d", "73a231e8a2ffc4994aa6cb6844dd22ac50e3b0a6f2e8e37e7e7321cc497640f0", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3", "82aea5f975a30f98c48de36491427cdaf23f3e033863943caf740ae33085bdd0", "84912ca2c4d1e3b07f53fc809801d0207d81ab23aafc2632353f03840f582e08", "8565a26ce53c33aded29e92ea3567d09188de529f500a0acdba09b0268458718", "8b2ebe02bd5630832d3676752202fca8aa6d1c2c4ed5780f7eb70552e5c28371", "8b8e778909e7fcdd22b1d09178f4112440ca95f765dee7ed25d66915eb3fe4ed", "8ed074484c7b48819c0dd09f7210006196ab84d269d7cdb67cf50dd830ceb137", "90603f507f11ef426aa632f6e225d021214cc0ee30474e0a2bed15bd6459eb06", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "9274967cc9a4b45764a7d5418cb374940ad57cd367c0719fa81c4f3cee55cfec", "93d577b2ff684293598a2bf4ba23b39840617045abc721f817fe41fee090bb49", "97f382a19c3cbec4fb146755503978594be46b68d181cfd819f2f8532de30e38", "9891cd04429bd2ca69523fa122ec0318280505ff4acae5ec7c76b972ea724334", "990e5c92846d0f97a8af10d8a11dadddd380d647bd493db159f316416ee0cf1f", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463", "9c191ae7ec8288e4a9edf3d86dd45160d4988575670f2675e748f7fad27347d9", "9c39063c8c4323bd5752db3aea014343cd863185d76fb8bdb72d54ce1ef08381", "9c9f9968f329fcb710da060c16c06227e059e688320eb7db55a3a5f7c5305afe", "9f0727e13389747e0f1b1171d2e81f37de7e47c06135c7597c70f086c1472f23", "a647ed141c9bc1e3f5b936d713c46cfe062f6b08e2f086b2b8be2cb7542befa5", "a7b27578e624a3cdbe9a1693db3fb9c582378787aa5499d62d2a50433bbad00e", "a9214ab83d37726da49d762fad738308206fa4288f3f8e0837a7c60919ebaddf", "aad41d9859992d8305c33d77b249291e858dc9faaac33b071324969d7fd119d5", "aca827b057cad21d965f85d57e4e2d7fdec9324e434f6f3521b19db41ecf811c", "b4cf5c29f6dab71988d9ce8659f19c49576b2f39859ada3eb0b59b34152661c8", "b580460970a9346e9fc6ccb7addfbff32ffaa78c62a71ae52f46386a50e5ffc0", "b5df5c3b6fccb0591984d3d676de0136f5b1803bd61206edb003f8f94271532a", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3", "bea93e79a0017832bd6a1fa6a52ad82f76852731a707e958147f410c74a653dc", "c3966cdfe097d4b1967a902391931c859afd882637d4d783eea8a3517f22c472", "c8796346ee0f6167a750164cfc204d3b383db4842e0ef70f688ccc64817905e1", "cbad22bb8f3a3580ff4b97e16eaaffdef41740091e16ccfd2861dfe295ab8ba2", "ce10fcdc0c5c0fd49c39f8bff0d62d38d88790eeb1cd42c0aac1dd90ffc328f1", "cffc0d8123bbb1822ea5257b6edfea487f812676e9915abef8924984d17a9276", "d53aa4a643e708f3e7b2d7b80b740bc417ca308ad81877aacd3157c03cba7078", "dd5bf914c958012f4de776daf977c866ac8212fafaea0f9f5033eac923556d25", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac", "e387b6f4072aaf134746fe12fa8e2868aaa2cdaa9b86578de3b0bfd10ffa440b", "e60891f6d08756dab7f23b276a7093fcfdfcd2fbd4c758de25659c4e27241b6f", "f1ef94d86a657d5fd1fd8cc1251d2ea3d688ec09d3b575170a971d9109217fe6", "f3a9727cb702066f5492152f06a77c08608dde82d22dd1868871a2690e686587", "fc628b8ccb5c27dd1a3edca0fe3ab313c3e980bfb6e924d4596d74a8f0d35e74", "ffa4b57df77543c65d1a37c479921294ab5bfcce668661f6e7dcb9a6d36e2796"], "iocs": {"domain": [{"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "host": "tribeboy[.]eicp[.]net"}, {"hashes": ["5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3"], "host": "qq2209458045[.]f3322[.]org"}, {"hashes": ["1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c"], "host": "813305377[.]f3322[.]org"}, {"hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946"], "host": "17v0o99672[.]iask[.]in"}, {"hashes": ["2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "host": "xmchz[.]f3322[.]org"}, {"hashes": ["003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021"], "host": "yao709[.]vicp[.]cc"}, {"hashes": ["bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "host": "jcsb[.]f3322[.]org"}, {"hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde"], "host": "www[.]qpf001[.]com"}, {"hashes": ["4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3"], "host": "hclm110[.]f3322[.]org"}, {"hashes": ["44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "host": "lbaabb123[.]f3322[.]org"}, {"hashes": ["4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3"], "host": "bybug521[.]3322[.]org"}, {"hashes": ["91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93"], "host": "hkchenxi[.]meibu[.]net"}], "file": [{"hashes": ["4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "path": "%ProgramFiles(x86)%\\Microsoft <random, matching [A-Z][a-z]{5}>"}, {"hashes": ["4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "path": "%ProgramFiles(x86)%\\Microsoft <random, matching [A-Z][a-z]{5}\\[A-Z][a-z]{6}>.exe"}, {"hashes": ["4a264b2825a10f61ccff7c10e9e4f81997324467cfdf6419cc48b17d272cf2a3", "5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "path": "%ProgramFiles%\\Microsoft <random, matching [A-Z][a-z]{5}\\[A-Z][a-z]{6}>.exe"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "path": "%ProgramFiles%\\Windows NT\\Yeeskam.exe"}, {"hashes": ["2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "path": "%ProgramFiles%\\Windows NT\\Wewkymk.exe"}, {"hashes": ["2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "path": "%ProgramFiles(x86)%\\Windows NT\\Wewkymk.exe"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "path": "%ProgramFiles(x86)%\\Windows NT\\Yeeskam.exe"}, {"hashes": ["2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42"], "path": "\\6618.vbs"}, {"hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac"], "path": "%ProgramFiles(x86)%\\Windows NT\\Iyyesms.exe"}, {"hashes": ["bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "path": "\\268.vbs"}, {"hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9"], "path": "%SystemRoot%\\Txgcvxe.exe"}, {"hashes": ["003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021"], "path": "\\2980.vbs"}, {"hashes": ["003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021"], "path": "%ProgramFiles(x86)%\\Windows NT\\Mib"}, {"hashes": ["4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438"], "path": "\\5075.vbs"}, {"hashes": ["4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438"], "path": "%ProgramFiles(x86)%\\Windows NT\\Cksasos.exe"}, {"hashes": ["3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812"], "path": "\\4448.vbs"}, {"hashes": ["3626136fa08df12a480f0b4e2e3fcbf725feaec3c5d7b50c2bcca5a590f15812"], "path": "%ProgramFiles(x86)%\\Windows NT\\Osefzqh.exe"}, {"hashes": ["43f2a67a245863acb3b433b64ee7e1271a704114c6ae1162a9d38875625d46ae"], "path": "\\1444.vbs"}, {"hashes": ["5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b"], "path": "\\9412.vbs"}, {"hashes": ["78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b"], "path": "\\8798.vbs"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9"], "path": "\\9607.vbs"}, {"hashes": ["78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b"], "path": "\\6440.vbs"}, {"hashes": ["78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b"], "path": "%SystemRoot%\\SysWOW64\\Sumiemu.exe"}, {"hashes": ["38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908"], "path": "\\5106.vbs"}, {"hashes": ["38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908"], "path": "%ProgramFiles(x86)%\\Windows NT\\Suggece.exe"}, {"hashes": ["7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3"], "path": "\\3919.vbs"}, {"hashes": ["7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3"], "path": "%ProgramFiles(x86)%\\Windows NT\\Emkmeyw.exe"}, {"hashes": ["9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "path": "\\8357.vbs"}, {"hashes": ["720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae"], "path": "\\4088.vbs"}, {"hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde"], "path": "\\2799.vbs"}, {"hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde"], "path": "%ProgramFiles(x86)%\\Windows NT\\Coauwuq.exe"}, {"hashes": ["44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "path": "\\7815.vbs"}, {"hashes": ["44e43d97579f393ac0c98cc4803e147c4ec196cc8a815bf977aefcc2d73a7942"], "path": "%ProgramFiles(x86)%\\Windows NT\\Usybtnd.exe"}, {"hashes": ["3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577"], "path": "\\1400.vbs"}, {"hashes": ["3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577"], "path": "%ProgramFiles(x86)%\\Eqomsek.exe"}, {"hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac"], "path": "\\7233.vbs"}, {"hashes": ["773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498"], "path": "\\5964.vbs"}, {"hashes": ["370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1"], "path": "\\582.vbs"}, {"hashes": ["370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1"], "path": "%ProgramFiles(x86)%\\Windows NT\\Lkezecc.exe"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "path": "\\5716.vbs"}, {"hashes": ["9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "path": "\\5563.vbs"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "path": "\\9108.vbs"}, {"hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde"], "path": "\\4281.vbs"}, {"hashes": ["324435ae3d162ab6de8c125c20079a0315e1d12da9f7c6cf602aaf750fcccbde"], "path": "%ProgramFiles%\\Windows NT\\Coauwuq.exe"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "path": "\\5123.vbs"}], "ip": [{"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "ip": "174[.]128[.]255[.]252"}, {"hashes": ["38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908", "3d9fce2dfc530299ebae2fb1662861bdc5e7f79f06e536d9e28a3b3c88f8f577", "4dc64b9529c284be07c723553bfa28f011ea9e62dc4e03b555a7328ca69be438"], "ip": "118[.]102[.]11[.]13"}, {"hashes": ["5b801365946e57cb620ced44c293c6433f41b5b1be99a0c6106080d96ff4720b", "773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498", "7dece9b930c80b4364894a8a415577bfcdcfd34231d5efa0ce6a465b030512c3"], "ip": "101[.]254[.]149[.]206"}, {"hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168", "38f99a66469a1a96ce0d42971fa9cff2933ff445c5b67f5ab6ef451def0bb908"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["003bf1d2e2213bef6d1d2437045dd868722c0046caa2b8b8e02ec782f284f021", "3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9"], "ip": "61[.]142[.]176[.]23"}, {"hashes": ["2b9d28dc19015ebe9155de796d6ce68b65cac0986561a394e4ea4da1b0ea6d42", "72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "ip": "118[.]193[.]233[.]10"}, {"hashes": ["3ae01359a4c5f12482b4b86278b8b2300a3b3deeb2222be3a8f48127ac5a87d9", "6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946"], "ip": "47[.]111[.]82[.]157"}, {"hashes": ["1249727b2bed9ec5abda7995602457ccc308b4eeb398cc905e6a95d7db6feed4", "57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c"], "ip": "219[.]235[.]1[.]7"}, {"hashes": ["91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93"], "ip": "61[.]147[.]125[.]184"}, {"hashes": ["5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6"], "ip": "123[.]56[.]41[.]200"}, {"hashes": ["773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498"], "ip": "35[.]244[.]181[.]201"}, {"hashes": ["773f42153cb0e1118948e985335de57c369c1d8aa37433aeec46564c0ce4d498"], "ip": "34[.]107[.]221[.]82"}, {"hashes": ["bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "ip": "103[.]214[.]170[.]249"}, {"hashes": ["de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac"], "ip": "103[.]212[.]33[.]244"}, {"hashes": ["4fa0e49145197258e2d90caa6a17d67daaab9c05061b9a89f43b297126e72bf3"], "ip": "59[.]56[.]72[.]201"}, {"hashes": ["720c9bab27b5f7fd7c8c0e8cf7a3ca0778b3edc3d2d7ae77caab571d5d57a7ae"], "ip": "118[.]126[.]16[.]84"}, {"hashes": ["370c3bdd6fe3df390349a1d9a5250fa38d92f284cf4cdd0d401620c728ac6bb1"], "ip": "66[.]117[.]8[.]164"}], "mutex": [{"hashes": ["30e104213ad9b49b07f5c7d9186894557ee547a8ab711fb08d905f185c367168"], "name": "Global\\ec134b81-56cd-11eb-b5f8-00501e3ae7b6"}], "registry": [{"hashes": ["57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSQQWK WWQCQSEM", "value_name": null}, {"hashes": ["57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSQQWK WWQCQSEM", "value_name": "ConnectGroup"}, {"hashes": ["0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d", "522ed8df43739cf35d5ea2a883aba86054b1f16e27c6ba8667e0906daa22c295"], "key": "<HKLM>\\SYSTEM\\CURRE", "value_name": null}, {"hashes": ["57c4619c9f54146f97862618d652960d46343fcedc172b6488af62dc06b5b17c", "6890d06eb9f952a91921189848ad4580c3cfd885d45c29c0a269c474170da5bb", "de61bbefafe04bdd34b4443ea39beb39273ee0aa8630165c7acfc992f89dc6ac"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSQQWK WWQCQSEM", "value_name": "MarkTime"}, {"hashes": ["91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSTRBX RDPNRKXQ", "value_name": null}, {"hashes": ["91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSTRBX RDPNRKXQ", "value_name": "ConnectGroup"}, {"hashes": ["91ecb555e79574bcbb8094b3aa8028a57f590a27815953463c26edc42b0caa93", "bdf3568dac89057d285e989a026ddcff4e0ddcecbea3fb1cefd7fb14ea5628b3"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSTRBX RDPNRKXQ", "value_name": "MarkTime"}, {"hashes": ["0b822644516bfcef097cd9d85fb2b5dba7f1fd655fc4e4d3cbbe264fc216d271", "503542ac2746b3016cad1db027acf0b3b5641fcd41aa44101aab3e7a8133549d"], "key": "<HKLM>\\SYSTEM\\CURRE", "value_name": "ConnectGroup"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "Type"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "Start"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "ErrorControl"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "ImagePath"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "DisplayName"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "WOW64"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "ObjectName"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "FailureActions"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": null}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "ConnectGroup"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "MarkTime"}, {"hashes": ["1b2723f06c8e0341d2a0462128f345a03b3f64c77a7ade133c5fa3a973eb01e9", "9a3bda23d0046f3ac4e5d489ff3d2a0d1116c0082fd8e2042905943490a02463"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSIWOA WMGKUSMM", "value_name": "Description"}, {"hashes": ["78473f4ecb3ca161cab2fc3ba4a4a17e3d713c00484ad5e4cff83ec3edb25a2b"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSACGJ PROLVJNR", "value_name": "ConnectGroup"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "Start"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "ErrorControl"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "ImagePath"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "DisplayName"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "WOW64"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "ObjectName"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "FailureActions"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": null}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "ConnectGroup"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "MarkTime"}, {"hashes": ["5ffc05a31c93e5c550bf965aef05a3804d2551be90639286710c3d2d9a0da5e5"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\KEFRAP VLSEXWFC", "value_name": "Description"}, {"hashes": ["5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSVCVL VZXKUCWW", "value_name": null}, {"hashes": ["5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSVCVL VZXKUCWW", "value_name": "ConnectGroup"}, {"hashes": ["5e1bcd8c4067c40fabaa808c4ba54e64267c3bfbd0453395b80a639e945605a6"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSVCVL VZXKUCWW", "value_name": "MarkTime"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "Type"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "Start"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "ErrorControl"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "ImagePath"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "DisplayName"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "WOW64"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "ObjectName"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "FailureActions"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": null}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "ConnectGroup"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "MarkTime"}, {"hashes": ["72f5eca3d266e9a68bca7e8f5db7df773823d750b473dcaf72f65fcf3decab2d"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSZMIA VAMRIRII", "value_name": "Description"}, {"hashes": ["6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSINGO XTFVNLKB", "value_name": null}, {"hashes": ["6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSINGO XTFVNLKB", "value_name": "ConnectGroup"}, {"hashes": ["6418d3f67f35bb714db8b32987d2222e06318eb9485fda5ef42ebf880a603946"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WSINGO XTFVNLKB", "value_name": "MarkTime"}]}, "reports_count": 40}, "Win.Packed.Dridex-9819209-1": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-execute-writable", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "network-communications-http-get", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-fast-flux-nameserver", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "network-snort-protocol", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "feed-domain-banking", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "deleted-submitted-file", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "registry-autorun-key-modified", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "potential-registry-persistence", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "http-response-redirect", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "sample-pe-modified-on-disk", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "malware-compound-cta-activity", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "task-manager-disabled", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0040", "T1499"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "pe-header-timestamp-null", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "sample-modified-deleted", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0005", "T1070"]}, {"bi": "malware-dridex-detected", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "url-pastebin-service", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0011", "T1102"]}, {"bi": "windows-os-reboot-detected", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0040"]}, {"bi": "artifact-windows-task", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "hook-installed", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "imports-IsDebuggerPresent", "hashes": ["1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": []}, {"bi": "possible-dga-communication", "hashes": ["7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3"], "mitre_attack_tags": ["TA0011"]}, {"bi": "antivirus-flagged-artifact", "hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5"], "mitre_attack_tags": []}, {"bi": "antivirus-flagged-artifact-cta", "hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5"], "mitre_attack_tags": []}, {"bi": "network-communications-i2p", "hashes": ["1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743"], "mitre_attack_tags": ["TA0011", "T1095"]}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Dridex is a well-known banking trojan that aims to steal credentials and other sensitive information from an infected machine.", "hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2e19ac75acbcf4315b3ed0e505297977f2c7efb33a81f093915fec9a46d087ef", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "2ef4f43fbd235860d4bed7dc3e1ca05b1314b64915f50e98191e3263d2dc83d5", "3004efd7bfae795a089aa83e067edcea22743df93cb3bb351c4bd208967862ef", "30f400a0f2f9cb9eba22b1945d73cdb418c957b916117c93d89c84d70445526a", "3160cb1305c856d1c0639eaf353a2e137a404d60a8921438d80fa319e6f412a5", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "33043d981207c5c9c666e688e0fb6d9033e59054bf953754d4a26b065e170f3f", "33ecb5ed7aa4be9117e002c08236694a4ea27437a0f435c0366de53f29b0f343", "363ceed7c853ada50fd147bc1bd78b2a95b04c9916b87c866350ca47876c1816", "364d9c5f1e5b1e46bf14183f4f226bdb812a73d343a4e9ede0fd090dc4acff0f", "3aaae5c9d8d5018430306c80d03b89f3355bde9c8e1859ee76c5d489e605b51e", "3b74cc88ff4979ba437c551e79f2612f99c4bb3f7bf020a8ffe9651bf1dfac65", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "3c902174e256642385825eadf6a9f768708312ded13ffd7e066f4e299c76d3fb", "3cd5ed8e7beafbc866357b787b6f99abd97ece97e2ca5c4f77c3a3f44fb47f18", "3da70a20c1d9ee581e6509dca9c9739b1856911cded530fcde3ded719975de21", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "43cd05308261914f2bf911f8b0bb475c063e73387d331c5811c3f8481dd13b14", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "490043e7c28dd81f5b4e0ef7175ffd05e10a4f55c0c5b99fa99cf3b6fc745bd1", "49a68e81ffd25c7326f83ddab13cdc85494f0a9b8f8e05004be48aaeb1a1b8d8", "49ff3d25d9de68e4f45dd93923a14a4f95bfcd7913bbc94742454074113bbc6c", "4aa8fe21ab00e87bfa6c0a55d9c3e11a085c4a5d79d02eea04c387a2a37083f8", "4b1469865f390853ebcf3944344458d91b9f60e64fe22d272754a66795d39d8c", "4cbc6f644d39b2d200d9531891256658d5b5e2fea96a46e2fa0aa1eb986eb4b4", "4e5280b3de0136166b860efe9cadc6da331a64d566a208fd415f7cddf281c3d7", "4ed78abe1b4b5aeadd46c1a1dcff136104a55edc4801528e14bd8ba0f6f36468", "4ff855cf32d8547f67315a264e816e1b20a06503e8617fb894dca33b2569bd8e", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "50d64aa9f6d90525025d4ca66ef1f7f70d2771e5b98be1e04637b03de8c63a2f", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "5485d34e0a87249df382cf4c3b93b42691b983903c09bf2e5406680464489d20", "56525db5ff3fae50c919d9fe8c4ac8d4a8380fc3d0c7a4b8a9eca2b9bfef7f6f", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "59c07c704da23c4b8835a404ab5ac65579a29082c699d0adc4449839fa387282", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "6129ec5d7a25c98395c1888ea3f3c8571113d021421d02b1e5493032640194dc", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "65b070341bd9847a455e34290b9303bf6d5b94d997d679240149b1ab27ed0d4d", "67dff7638af45631643265854d943e446de1b98977b98d5f4af37bd99b82ac70", "68c1709e68e195651e0294aa28f5bb17223b560f1f605350ad76b53af80f277f", "6a49762c90ed8e480159638a1047d2bd1b979579f32466c80b52bac772fa5286", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "6bcc401e1f83d9347c001f7121761cdf4d93987c8b2165d25ec83727d8f58d49", "6c8c770e2d5f6e870b11c70bdfb88aa11bb953ef8e835ab8a3ef3271c0b58710", "6d2e06e39e2a843dcf0a20856c87fa2c25982549c8a8b708895e320fede449a8", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "736309350e5192c0b45c588e4e2779d234b33af6f5fb03ea8ae7f0d2566ab6e3", "740f1cb3ef371b8b6693a9f761970a4df392d8b1f4b02b63eb510901be060677", "75591736a501423b43f0680f47e05d2113b88b2fdc8df1872fedb894dfd20fb8", "7561751b7df51492a14f8e3aae1c9d307e8a378abdf5b77882e44a89dd52abaf", "75ae6353205ff2439d8df987b8d395d781d5911697a0926e513d8963343565c5", "7715fb7576e063c4ea475707d18df6f9eedfb0eec48f3cebbc6d840bbafd12fa", "78f68e1902c2bef5ea20576d1683e0eb5c004f9532959793a394bde852b9a396", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "7b0e89216aa9051fe6fd1c8f53f16c2ff826832bd0aa0d33fa2aa9363f532123", "7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "7e409bccc03b7b2103ee6df6590b6c64833d7563e6613e5a3a399050eee851fb", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "8073bacdb9ab849aae2916941a4e7c535f5906b4548eee7a43c21f0f8b296c57", "809bb870ab1c1030e43000521840844135d88abb961a62a519334741f2f20c14", "80eda9c044296c7488d37f86299fbcc1d813fa011cd71f716ec26e97635bab96", "836bb8a051faefbae8987704121a7092362439425ba8b412ec06f2df73ec422e", "83fca0f16351bae77932ecc9dd9773d3617dd5281217213c4fefdb117a880510", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "89069fa324e38900019a8e5e394cd114f4da6f7d4a8921bbb328cc6ac92d29cc", "890f2b2c011d158517ccad72f3fb5225e8f2812597d14b234873058a14acbfb2", "89374931ec98f4b9c77e740204195c47d4fc45c01da64d47b124125f47116771", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "8c362618fdbbccef374bcd138780ebf8620599393d91c1c04d43be15eb2f2d87", "8ce51df8aa292145a25605e3880f245b2f5affd47c028dd965643599e064ac69", "8ec486aad8df33c01b07e943da917002d43cdacdf5399d439c57488a40ee35f3", "902f80c4d5ba68854ac50810d34a48edca3b141ce94c7af7e0672b64602b012e", "9119fb8ab6a6be011e8076f8465c3bdbb5d628ab8346aa94be2f6322d0380e12", "92635a72460d9ea7746b63bd722f4a5b264d7717462e71806bb056f28a68aea7", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "95f18c4d466820a0c58cc2480bb95e5e23161ec4c9fc90fb0a9ca1b21c734442", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "9c8647a0c76259fb9cfdba9b77658024a99afe4988809fea16127d91182eedb3", "a07ba991ea724dec2dfbd7f0deb129848e1d6f674d467548466eb167d3bab202", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "a27c918a6b54d7bd1e8eea01a8ac8a89d7db202f463e783b788ab0cabd1fa06b", "a2e74f674a489d2f01e97cbc149cf8cd52ca71f2ddcfabbd1f8353828ff82d88", "a33bbf146853c286c77414e8e9c0ab115ea3559f7c99b1a15cbe59844b33c003", "a359aed4b6b30aab32a65417a0bdad3ee4a4e73ebf9c141b033ee760a10cd581", "a39379500a875fcfa8c6d35b1bcb5dd43a348d34f547805eedd59408f56de292", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "a4911f882acc1af1f8be3741199a0eded3143f0ac69c2433857144f40e851c33", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "a6e683a399be9a6188fe56344a6a4042411365ba4c150e0f4bb928ee44011ce9", "a7c39280d9823036751595265fce995cd4c38a85eec63470e4de723254d9376d", "a892ce29c8f58d8bf6e8356347eea1817d0cb0dbcda659a689237ee2949674ba", "aa844ecdf3b0efdc4c8e5449850108ef721a3233d67ac77d1bbd681cb036f73e", "ab4eec130871493d21f9745dde21e8ffd6cdab0846432df1c888cce75fe9e278", "acf3f397d1e77a4d6f9bcd77506505fb1afe977a3d688f3745526dd61f939f44", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "af2588f698860a27d7520ca6e032ba7111f3ef45d3414fd714858a72e7b80e00", "b1778d8830b491e8420e33435fcccfb76b87ea93139fbff9af5cbfa9e177535f", "b263c2d38f38288ceb2e867655a933c9eb3efd8929e53b0c0a7f1ea17d15681d", "b3afa6286c78d35f432f96ae170abc9e15fdf32e65edd4e754a6441a189b6eca", "b3c522512821a8c7f2bea86ee23c951a46eaff8c73c8d7dee8cecdc5b4ad90f5", "b85d0012310df17abb2ca37eb80e58052c8849525b6d9f6c775298ac8f63d17d", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "bd1b5cf651e61093b634dbebbe06f497cc8859e224c5e4339a4f4001caa29905", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "bea1713474f1bae8996260e496dd6348ed903ce2f8904deca51f0b89ef8aedc8", "bef1e7e85ab27f8fd85463aebaeda2cb7ce7515c7ecda16e36fc75b20f66bc9c", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "c016117845c9203b53516c19fc55e82293359ce3927bed7ef2d10b51933aa912", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "c2f4e087bdc98c86b993a5602f002f0858a77ea623fd141e5c4c50dc83bc5e00", "c44aa977f6ebe4fe5d182bc9e0f0a811602886aac7c9955d31ff55036bd6aeaf", "c47894e8ea7b476671436b626085a2e3da102b42249d4b931af6847f77a588d4", "c48e36847fe7c7339cfe52259d8dc8c84153d5a30dfedb8503699130b00fe877", "c56617a263002f55c89d6eb6f6baf770d2c530ee72b82d040242f4082a2d21ad", "c6d0f31b3d0b2231b0aacf8672434acb0f0dcdcdd0fc23daed63eaf52e5b3368", "c7d4dc2f77a448c9ea971b5253087e259df4a7ef74124d6bb6ab7f9825e61538", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "cc422fdc803467b46cf18c25cd8fa605dd62313227600ef88b5a74411de44ded", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "cd32f1fe8799615ade743f5d54de2a53f39a6f1dca7771efcf2d3eb4254608ab", "cd9d2745db76a0610876f5805b1e0d98e11d2bdf09d8defba040eacd346b83d3", "cdf7e755a75d01a6cc994e9b527875b27fbd602c3d041189883caeb3f5cd9d70", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "d6855e0f4ecdd8ba52e20da11690994b8d97ee334f7fe1b522b125eb93a267a1", "d704dbada3593a243b4aeaa926947faef22765c58db2546ac90e48593388c5c3", "d83cc4958fed9711b9c51ef8635a85846c54e9b26ec5ba35b57e05416df013ad", "d8fbc16041719e08aed3d6a2e4a9d95804789e3aee1093c09b507125cf770a34", "da306f4fd54a62cf4c2813ec5e0b666df1e50ff22e48a6a4d05080d2fec95ff8", "db79c7c12e637e3beb6e9d1f17fa3c996916ab08abcebb19c20f9224f8508d2e", "dbc11759c7bef9a7f4660df10ad62d1bd5467910ebd241f7988c151b93b2b9c4", "dbc52a637b468760bec723835d3d7efc4316de514e33cb09b7bae541c8a3ed6a", "dd54ab1d7bafad3b102e47cb465bfc4849ba585b30621dfb7341b7b0fa51edaf", "dd8e0aa019be202988395fad079fd4778fc8165ecbc1fef1c44e8b6516fb9dd8", "dddf0e14c2b8459e3405af6805e4f60ea854c0e42512b5bc41c3cd2a95c74a3d", "de0836b96592a80b5cf4709fafe8c5f168698c4c81ede5a3737eee6085650674", "def4fe381a64db12586fa046c990c57e0f169ba3456f1d205e1d5f35a8af99a6", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "e146cf557259909147b786092bca93cc53079bea1f721677c08d47d28177b643", "e1e04b9394109c66fe122fec3055b20d4649b1b25a1231114acc1909e626a3ab", "e273e07a7b1cb5adfff0af0c4aaa89f7efe680564f485d03148ca536d7ec8489", "e299b42e6567cb3be02582ab13667dfc9d88a31c5f61a5be0d42e84aeeaff40a", "e3182188c81e84fa604844296b764994f21e15a63959e209990af87c197451d9", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "e589599cf5095126bb4ee821709812d46245d690fb6f9d7999f3ef38611ee3eb", "e61a9a20b8affc276f4463b7e9efbeebe31459365816f7e23bbe6a01143e2ae8", "e918758f23d58e7c663f797cca9b2eafdb3c031955bd6a74a5ba977e9de7de01", "ea335bf751d156c05e0692c7eb938ee73cd1aa836f3dacce7d470abb444b6827", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "ebac7ee074dc054c9ec5790363db1d5ce1d7625e48bdd42734d7bd19da3b3a43", "ebec502bf69e79576962354c680601612b56acf9d19efd7adb91248ad01071c2", "ec3420fccbe68a31588337679e551b872be5086d008a953e55848e778721437c", "ef87593a6df4141d56ae661ef25800db1513ba15c09bc7284cb8fb34ffb619a1", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f284e32ac6bb0ed4af7852f5e03ca74c2d68ccc7c23c6b88ba20e73e6839b79f", "f35fe87b07352c12c2370b3dd50e92e10c901dee8ec7ff209247404d5027efce", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f3ffb42d764d15adba77ea0c7e9a57ac7458a8ee78d723a69e3270196d45ba32", "f49213de71fe543c6257281068014c6cce417c1d23998ef4790093626b126251", "f4a5e15d9a311e872dedf05025024f603ac3449929510590db2483dcc9c6da74", "f4bbab71f6670cedee1f150f04b4a6001a41ade294a920a8a2f1ce009a4a242e", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "f68227a5fa53f270a9c2c678adf567841b5dfc41c7e4b0a594146044ec4f77e8", "f8ccdafb12e3d55f0a1599c2f82662d7ca7d66262836e705b8b9e615a00b6a8f", "f96d25d976ed9abd475c1a1e75d9b6a959b1a10db3aa29018a6f904478518c8e", "f9a7a303174c1aa4e508bdd8b03c0ae03e887f8e8fb55f232b4898444cb53c63", "f9e436e3c6e10bcd70a87acb3206b969f263c9ed031cc965b3df7d467a3c4455", "fb7a37b8341c9d232567bf1a23a1a9ea34b6bb30ec1b1ee13dce4b15f43de5f7", "fbaeea5c829d0077851e7e132fd82ccd1719495ae9a2c69aafb9f6923aec3058", "fc1a8f574d3496e0a9f7707df74c33c177feb4d7888de9fbcc0927e9b9cf18e8", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf", "ffc131b6cc144859891497f46278b0a1a05f88a7fceb4721491f81069244ab98"], "iocs": {"domain": [{"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf"], "host": "pastebin[.]com"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1"], "host": "ctldl[.]windowsupdate[.]com"}, {"hashes": ["06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1"], "host": "cds[.]d2s7q6s2[.]hwcdn[.]net"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "cs11[.]wpc[.]v0cdn[.]net"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]79otjy24xk[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]bnyuwmkw6o[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]fcn4uyhfin[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]ftbtlvr2s6[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]ibxa6gy5sn[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]lggglkzaia[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]53uuqwro9b[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]et0wbgprfg[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]i67uljtaxm[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]kojspnmyqr[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]owjmdbkr6e[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]qb61cfv85k[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]sxmorqgytc[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]t9pb4oeyjo[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]yn4uwob8mf[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]zgil5ledvy[.]com"}, {"hashes": ["07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0"], "host": "www[.]1cctewxjyp[.]com"}, {"hashes": ["1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5"], "host": "www[.]nreyta6cwu[.]com"}, {"hashes": ["1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5"], "host": "www[.]awr6zkq2hs[.]com"}, {"hashes": ["1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5"], "host": "www[.]qfzyebsybv[.]com"}, {"hashes": ["1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5"], "host": "www[.]v2kht7we14[.]com"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7"], "host": "www[.]nariviu4kx[.]com"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7"], "host": "www[.]g6aurx21ct[.]com"}, {"hashes": ["0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a"], "host": "www[.]mx6ax5axla[.]com"}, {"hashes": ["0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a"], "host": "www[.]yjanhhxuca[.]com"}, {"hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "host": "www[.]h5qbwtmcim[.]com"}, {"hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "host": "www[.]mfa5by1krt[.]com"}, {"hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "host": "www[.]nxxkfpqhql[.]com"}, {"hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "host": "www[.]stgjg4wi8z[.]com"}, {"hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "host": "www[.]ia7n06hpki[.]com"}, {"hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "host": "www[.]b2z0vod9kz[.]com"}, {"hashes": ["284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "host": "www[.]sxmjy8fivd[.]com"}, {"hashes": ["16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4"], "host": "www[.]jwn5zbafmi[.]com"}, {"hashes": ["16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4"], "host": "www[.]bawhsfgo2j[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]r2inl9udxh[.]com"}, {"hashes": ["158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e"], "host": "www[.]mvzlxfx9dt[.]com"}, {"hashes": ["158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e"], "host": "www[.]6zcnp4sm78[.]com"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43"], "host": "www[.]gppogy58qg[.]com"}, {"hashes": ["158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e"], "host": "www[.]mfcdfoussf[.]com"}, {"hashes": ["158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e"], "host": "www[.]edjmpktanw[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]k9uka9oola[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]ws0dmvtwdn[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]gqhh6ooan8[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]1fpctxbocc[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]abpbtffmp4[.]com"}, {"hashes": ["184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "host": "www[.]5auoxpd917[.]com"}], "file": [{"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "path": "<malware cwd>\\old_<malware exe name> (copy)"}, {"hashes": ["06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "path": "%TEMP%\\<random, matching '[a-z]{3}[A-F0-9]{3,4}'>.tmp"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc"], "path": "%ProgramData%\\Microsoft\\Windows\\SystemData\\S-1-5-18\\ReadOnly\\LockScreen_Z\\LockScreen___1024_0768_notdimmed.jpg (copy)"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc"], "path": "%ProgramData%\\Microsoft\\Windows\\SystemData\\S-1-5-18\\ReadOnly\\LockScreen_Z\\~ockScreen___1024_0768_notdimmed.tmp"}, {"hashes": ["0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "path": "\\Temp\\HncDownload\\Update.log"}, {"hashes": ["0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "path": "%LOCALAPPDATA%\\Microsoft\\CLR_v2.0_32\\UsageLogs\\HncCheck.exe.log"}, {"hashes": ["0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "path": "%LOCALAPPDATA%\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl"}, {"hashes": ["0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "path": "%APPDATA%\\Microsoft\\Windows\\Themes\\CachedFiles\\CachedImage_1024_768_POS4.jpg"}], "ip": [{"hashes": ["0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf"], "ip": "172[.]217[.]12[.]206"}, {"hashes": ["0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf"], "ip": "104[.]23[.]99[.]190"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5"], "ip": "172[.]217[.]10[.]78"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "ip": "72[.]21[.]81[.]240"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4"], "ip": "104[.]23[.]98[.]190"}, {"hashes": ["31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3", "7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1"], "ip": "172[.]217[.]7[.]14"}, {"hashes": ["06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1"], "ip": "205[.]185[.]216[.]10"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe"], "ip": "173[.]194[.]175[.]139"}, {"hashes": ["3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157"], "ip": "142[.]250[.]64[.]78"}, {"hashes": ["09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4"], "ip": "173[.]194[.]175[.]100/31"}, {"hashes": ["0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4"], "ip": "173[.]194[.]175[.]102"}, {"hashes": ["07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2"], "ip": "205[.]185[.]216[.]42"}], "mutex": [{"hashes": ["2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1"], "name": "QwfpZjePnU"}, {"hashes": ["2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1"], "name": "aPsTj6VuEa"}, {"hashes": ["0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f"], "name": "311Mkr7VEd"}, {"hashes": ["0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f"], "name": "uM2op9CoOl"}, {"hashes": ["0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f"], "name": "D9s3f7uTP8"}, {"hashes": ["0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f"], "name": "7IWGS8xVSK"}, {"hashes": ["0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f"], "name": "5UNwjs08pW"}, {"hashes": ["0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f"], "name": "tilsevyDm1"}, {"hashes": ["0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f"], "name": "3Vd3jMXCQX"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "DRu3Sh5gdu"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "UoPPnHjG8C"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "dZuTID11Mz"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "puOK1waZHz"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "RdyHdMSjZt"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "fIdRIvDpxc"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "el9rzspeWr"}, {"hashes": ["2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac"], "name": "154PDLu0Ly"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "UDozcoidFa"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "eoQAqaQr7s"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "X0Des9pz0v"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "TSjcc3p9fB"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "la9yxJSgEV"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "JtBjxsI6IW"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "VCHG6rkcVW"}, {"hashes": ["13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96"], "name": "i0txY7uR76"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "Lh3hcg1VVa"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "LQvY2LSmn8"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "oLpexuIIJo"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "bGMu8UO5md"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "eU21MpBfxu"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "qtfaCN2SZK"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "KY7AtMVHIJ"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "KYXYRTJzJW"}, {"hashes": ["157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf"], "name": "Zxf5Juv6kd"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "7QNJiubg8h"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "dqw9cGXkDe"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "89LeQhq1pq"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "GXOf5yals1"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "k5LjY2nSLH"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "45WZ2JM0xT"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "t8pihbDJdv"}, {"hashes": ["2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0"], "name": "Ekl6XzeZy2"}, {"hashes": ["1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "name": "aGotCSUnnc"}, {"hashes": ["1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "name": "Wr6Qi841bq"}, {"hashes": ["1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "name": "vUHZozQSuf"}, {"hashes": ["1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "name": "GMJ1WodF5f"}, {"hashes": ["1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "name": "Kwe95xOVh4"}, {"hashes": ["1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "name": "YlAToIjFRT"}, {"hashes": ["1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da"], "name": "v3XkHKsq2O"}], "registry": [{"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE", "value_name": "trkcore"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\SYSTEM", "value_name": "DisableTaskMgr"}, {"hashes": ["0235205e1d9636a0212eeb08c8f4440a2b2cea3199c15b3e028a5ba2df9b89b7", "0260d9ee215c86c1a2510f93293ec03c31af5c849a2d7782765ada9e3b073bba", "06049be088c3e16f6466db4c9db36750b120017ce56f602f02001f80c43defe8", "06dc7541d25c3bb8d6c06b3699273989d931399660430497cf2104be962e69b2", "07b319c358717257f94a8847aa5871a5cf385468fef9aa862f4a4ebe85bd27e0", "09351b5ea74e8aff44ec6ea78f1858d65b40122fdf0e49785d94c7a395f51d72", "09a059c0af0fff338f88de6097d49bf98059b3af9a8a53d3ff05e5583f938b6e", "0bda655e36e76c74eea73ed3cf5514a2eed04f79b336c94c7b8da9e60527eb43", "0cbb84597e5fdf76cbc16fa6a162ca83dc58b3790fa4fe97b4a810eb86ba249f", "0eaee28da99f8119a2a657a975d526c5145d70adb1dbd3fd0cf02d0787d0db8a", "13f0005573bbb598472171ce1b805a59d861ea8be1497f619d525af829dd1a96", "1518bf354a6294bc73b3306ae6ee82ce2ea87c6d958c4b4df6b536992702d4d5", "157ca7deeec5d7d2175cbac88b87fb8b2226646470976dfda465e4ad4dc471cf", "158c6cc9463c87524162549eb4763d6a1a6678356678d50f9a7a5a3b85936b6e", "16c67593a4238afae9d159aee0e75d0f4d5413338acba8dbb708d6240e032fc4", "17136a99f935a72f7fe7b5aa486f4c27d5348cbd28c2925bdb638235466ae810", "184de8e4ae9093ed129feb26ca81792f9e2707b5a1f5c89383788f10c53f62f4", "192033da234e1f5fd76cc774fe4ed4a9059b343984acbcc0743fbe157790ee16", "1be901d747349de5ac0d9e6f3fdf7a37dd2f260b70cd5cd5d61c6991089ba1b8", "1c8b98ca9bda4e72ec5dd588d8b7a1bbf839ef49007c360b25c7bd7966ff25a5", "1cfba48ee57f732ae3831bffb449483a5651c126553b87240a86816f7e212743", "1ec9bc3a47a431f966c75675113167edf15b4e2f09ec978de1a8cae2ef8336da", "21fc207a10dac9c4f424a97461eec17ec33e2c79f9259e1bd9a9c417617b2c2a", "24917890f07c86e438add11172b9500e47d30f0ac0e13bf0a3563cb4387fdebc", "2769715955f85e336e2c9091f575b5b70457ae39a30bc16113e761016fba449e", "284ee415c59a73b775b466d1ceae4db0ef3121508540a91a5b705f128db81cbe", "29cab1a0eac534302b952fc979d28c9f044e061fb4272db56eff7f36a65fdec7", "2c030751753ac33b2eab588d5dafcacdbc4e72b2b215f8186def025fbd4f74d1", "2d25a065e31f4dfa2fce18e77124e149aec72d4350388573dd3da4c2712875b1", "2dabb98e5e7ec9de63d867e52f0ff9981a4785e7073af107a10bedfa22256fc0", "2eb58a91d3a14ba15e01101b01931fb0b12dd7e9a91e093e15a8b99f02e104ac", "31c2c7ae9089df5e0319ef119e800e5ac1b2e40a4864ce3d423c47fe8ca399b3", "321c43a1e8a30048e663424fc8fe93641a07b0619f0eeeb557e11592e680dcb5", "3c0b4c4bc8b5b93e9450ff7adf872175fdd04b03b14e9f14461778d22befa8a6", "437ca1ab589f6a73eb9eaee14ed19f0b48d326e262a39e42f191b36a78b9299a", "44396235f177cdca7f2a1ffdc4f7dc31378d520901668bcd9732799ffe8129c7", "5025d73413554ea8353328c85df1ae636a298079cc17b805ec1aac6d3da056ad", "511c10f832ba349748f66ba290e66fb957f07c41ab500404ac440bf0a743ad8c", "599f4fb8818bde1d0f1ef9bf8c0cced82168fa27ae3527c763c06ae2e90cbb9c", "5a20228a02aebce7e6025963ce5488ce6dd661f3e5faccb50d439da6e8b1187d", "5b34d3d3173c08006d313e2f91f3a0eced3ab50a6f5b70772971bb9535974ad5", "5f964c3b83a5fc0983c2b208e302f22764387b2ce3b6e4491ac1b0ad2a62828b", "63dabda9957d2cb1ef56a50c13a5ae09e1c32563b13a632441878fd856b1a391", "6aa2b3d9a738496c1917bd17c928bdc32c68e0d0b814fdc511a2b6f1b12d0a61", "72cb6ca891284074d27f1d5d2a6d569425faeb4fc8a61eae3fe75e30387c5936", "7338c25533cf96581547b42aa99c8c6ae470b359e2b0cf327087a5078823c99d", "7a393d89f1cfc18fa255643c3333282a18d3fc564dca77aa745951e50722a882", "7a6007b9c87f9b7f3b0ad02b899a2eba524296cf93b2d633846e2c841e46db21", "7c6274d36ca61da4521c4a50bf5ae60847209ab06f12ef714173918f6ef8755a", "7e4c28a70ff5c52585fbc2211124b4aac31ea8cba68c07c1c87437fd223ffed6", "853dd5c0d97f681b9fe251e6b4300f605340c9d4fc58ff14d18fef6236862fcf", "8b4fb62f0be720a62f953e1d50a85911d4f02bd2f63bcc2fa6e02eb4165cb015", "957d3341695c545d683e5f2acb4a3780fce17ed35b678b3573cf829e871aec3a", "9581ee5e8633803c559ff052159f327e881accf459a7ca42ccdd4458d93cfce3", "995ceca3a0c97f6eb99152c67a65270add3fa44bfb836b135692d062797facd2", "9b8736e82b7771b39fd76bddadbfc4f847bf7112e05262cabce03d5357a8ca6f", "9ba97e2cff22afb7cf42ddfa4287152a93eb71361299cb72a210d7641796ff9e", "a0f83802ef9f416719cb7e6cc141cf5ea23802e8b39279c21c2bb0e4557d81d8", "a1f1a7f5177703a76b9d1534bbfd43e9b02d1171c693bcae8216bf16c95f8323", "a42b54f7733a7310f190ad8a61bd3f3c897a4f5b719ef67c43bc65e149b1fd6e", "a65286dca0db2deac59d487b80677a2affe24738fa6e6ea756c6e073f285bed4", "ae3ab6669af3f68a64c11c835e889f77e509dd4544546fcf27c55e647d491708", "af16ef7db9fc04fefdda12ba54d915d585be4bb066d0b5cb6d895e8c345f53c0", "b99616b59ce44e16fbdff95161535ec93370bfd3324786bc8a95b07c0a5c48ad", "ba56a56333840af4a135b2c6fc3c0fb1e1fd384931040782ae77b48febad620a", "baa2baeb8ecba1b936823a512d19e429c3ea7608b3f592725543723e3a228af5", "be0a3910000419c35ef44ad1e7633d91a9a1e2df439f4237f2ce6f9be59baf45", "bf41a26ec5293d7978fa5026aa8ea240bd743883ec5504ca2f18d7a234d5fb3f", "c11ef4ff0d9fa854bf347d68df672668cd69612be50c8675880e5cebac836f4f", "cb761aa128357b777d6010850ecf89448064a0e895d21f81a4f7e0ab1faa2b24", "cc541517ef22ad77bd1a06c74343699c53a0207595c73314000497f8fcfa01de", "d41381024f1715090b058dbefab01fbc18340538fedf655476a9c4ff3c4a420a", "df099ed67df3e4b094843387358c55fd2078f30db80f0db3e8be0281a41f3cdf", "e144ab01deffc766ce06da18f763ed9d2eb08dfd48d7324586ad55901073226f", "e35a3e88f8be70af6595aa4d000758ba5e49d14ced27ef8788f9b827ba52c157", "e411937c8cd35dee84b8cfdab9fc5196842c4fc835ca8e2f1cbd415151ba78f1", "ea6900a196e206b337f44a604a53b3026e02ce960f33f7e8cbab9d624fde826a", "eadb9c196f2c22f3a654dc9864bb3ffe050ee46aeeb52d129f536f59c165ce03", "f02df4904314a1e60d45b686db5009f969ef0dd1b766dd722a96b9d9c4f23320", "f1df7fb4227ebbb86d7615e8ecd5242509a3b75289b000030c814398344a83ea", "f3983e5da5323ddaebd8a5a70f1e2b8a1e130f9b5a2a647693cbca9b2b1e8287", "f58a9636097130469a332d861154e7362082ce676e5d0f588f059564ee64ee57", "ff3849191c6af362e01fd2bd6dba60566483d10e6356aa776cc9b02bae4763cf"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\ACTION CENTER\\CHECKS\\{C8E6F269-B90A-4053-A3BE-499AFCEC98C4}.CHECK.0", "value_name": "CheckSetting"}]}, "reports_count": 83}, "Win.Packed.Glupteba-9819426-0": {"bis": [{"bi": "antivirus-flagged-artifact", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "pe-encrypted-section", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-section-execute-writable", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-service-with-autostart-created", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112"]}, {"bi": "currentcontrolset-service-added", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1547"]}, {"bi": "pe-packed-upx", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "process-long-cmdline", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-fast-flux-domain", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "dns-query-nxdomain", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "network-only-safe-domains-contacted", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "feed-domain-rat", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "feed-domain-antivirus-service", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "enumeration-browser-information", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0007", "TA0009", "TA0006", "T1083", "T1217", "T1005", "T1119"]}, {"bi": "sample-launched-copy-of-self", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1202"]}, {"bi": "listening-port-opened", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0011", "T1219"]}, {"bi": "artifact-windows-task", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "registry-autorun-key-modified", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "windows-util-schtask", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "windows-util-schtask-generic", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "potential-registry-persistence", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "cmd-exe-file-execution", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0002", "T1059"]}, {"bi": "artifact-flagged-vm", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "modified-file-in-system-dir", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "registry-autorun-key-system-dir", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "pe-imports-empty", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "registry-service-autostart-disabled", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1489"]}, {"bi": "process-with-multiple-children", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005"]}, {"bi": "pe-certificate", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "pe-tls-callback", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "netsh-firewall-generic", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0007", "TA0005", "T1016", "T1562"]}, {"bi": "registry-windows-defender-exclusions-added", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "netsh-firewall-add", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "pe-imports-exe", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-antianalysis", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-resource-lang-spanish", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "process-check-virtualbox", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "TA0007", "T1497"]}, {"bi": "registry-service-type-modified", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112"]}, {"bi": "pe-header-subsystem", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "registry-service-delete-flag-set", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1489"]}, {"bi": "enumeration-bcdedit", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0007", "T1082"]}, {"bi": "malware-glupteba-bot-mutex-detected", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "artifact-av-detect", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0007"]}, {"bi": "windows-util-schtask-create-onlogon", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "task-pointed-to-appdata-directory", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0002", "TA0003", "TA0004", "T1053"]}, {"bi": "pe-artifact-invalid-certificate-signature", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005"]}, {"bi": "windows-util-bcdedit", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0003", "TA0004", "T1547"]}, {"bi": "sc-service-security-descriptor-modified", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "sc-service-security-descriptor-deny", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "dns-query-txt", "hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0011", "T1095"]}, {"bi": "network-communications-http-get", "hashes": ["e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "http-response-redirect", "hashes": ["e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "http-response-client-error", "hashes": ["e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "url-not-found", "hashes": ["e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "mitre_attack_tags": []}, {"bi": "network-communications-http-post", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0010", "T1048"]}, {"bi": "network-snort-indicator-shellcode", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": []}, {"bi": "windows-utility-downloaded-artifact", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "url-forced-download-prompt", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-downloaded-executable", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "network-snort-file-exe", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": []}, {"bi": "network-downloaded-obfuscated-executable", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0005", "TA0011", "T1027", "T1105"]}, {"bi": "network-snort-file-generic", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": []}, {"bi": "excessive-process-creates", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0040", "T1499"]}, {"bi": "network-snort-exploitkit", "hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": []}, {"bi": "network-file-downloaded-to-disk", "hashes": ["f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351", "0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": []}, {"bi": "hook-installed", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "network-downloaded-executed-from", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": ["TA0011", "T1105"]}, {"bi": "pe-dos-header-paragraphs", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-timestamp-prior", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": []}, {"bi": "pe-dos-header-initialsp", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-header-numofsymbols", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "network-snort-browser", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": []}, {"bi": "pe-header-timestamp-null", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": []}, {"bi": "pe-dos-header-relocations", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "possibly-unwanted-application-detected", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "mitre_attack_tags": []}, {"bi": "network-private-ip-address", "hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0007", "T1016"]}, {"bi": "excessive-tcp-connections", "hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "mitre_attack_tags": ["TA0011", "T1095", "T1008"]}], "category": "Packed", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": true, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Glupteba is a multi-purpose trojan that is known to use the infected machine to mine cryptocurrency and steals sensitive information like usernames and passwords, spreads over the network using exploits like EternalBlue, and leverages a rootkit component to remain hidden. Glupteba has also been observed using the Bitcoin blockchain to store configuration information.", "hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "iocs": {"domain": [{"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "host": "easywbdesign[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "host": "vsblobprodscussu5shard35[.]blob[.]core[.]windows[.]net"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "host": "vsblobprodscussu5shard60[.]blob[.]core[.]windows[.]net"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "host": "fotamene[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "host": "pioncker[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "host": "myysuper[.]com"}, {"hashes": ["3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764"], "host": "server13[.]easywbdesign[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "host": "thirdptop[.]com"}, {"hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b"], "host": "server7[.]easywbdesign[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "a1815[.]dscr[.]akamai[.]net"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "www[.]adobe[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "googlehosted[.]l[.]googleusercontent[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "swebgames[.]site"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "translate[.]googleapis[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "redirector[.]gvt1[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "setbird[.]site"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "clients2[.]googleusercontent[.]com"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89"], "host": "server1[.]easywbdesign[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "r3[.]sn-p5qs7nsr[.]gvt1[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "r3---sn-p5qs7nsr[.]gvt1[.]com"}, {"hashes": ["e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "host": "server12[.]easywbdesign[.]com"}, {"hashes": ["60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189"], "host": "server3[.]easywbdesign[.]com"}, {"hashes": ["3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243"], "host": "7d681903-73ec-4d85-94b8-fca3aa28a136[.]easywbdesign[.]com"}, {"hashes": ["8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b"], "host": "5cd92230-7319-4080-ba3f-be595046b199[.]easywbdesign[.]com"}, {"hashes": ["78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767"], "host": "4f40063b-290b-4ee1-8af3-77d545a7b1c3[.]easywbdesign[.]com"}, {"hashes": ["66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4"], "host": "5521608b-3d71-4f83-a312-1c5a9db97abb[.]easywbdesign[.]com"}, {"hashes": ["96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae"], "host": "b3259850-d3de-4cf5-9758-9b519a3f1b5d[.]easywbdesign[.]com"}, {"hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b"], "host": "58562d48-3338-464d-9b6e-9e728d043521[.]easywbdesign[.]com"}, {"hashes": ["60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189"], "host": "386433e6-dbc5-4c08-9574-a8b1639c7cc6[.]easywbdesign[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "host": "b06e4ef0-b75c-41ab-be3e-b5a4a424d38f[.]easywbdesign[.]com"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "ef5aefa4-338d-499b-862f-6aaec1bc1179[.]easywbdesign[.]com"}, {"hashes": ["e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "host": "7f1f49a9-a1eb-4b52-9cdb-99348dd200f3[.]easywbdesign[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "host": "b06e4ef0-b75c-41ab-be3e-b5a4a424d38f[.]n1[.]thirdptop[.]com"}, {"hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b"], "host": "server16[.]easywbdesign[.]com"}, {"hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "host": "94e5ad3b-1e68-4d21-b38e-6645dc5c8fe4[.]easywbdesign[.]com"}, {"hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "host": "94e5ad3b-1e68-4d21-b38e-6645dc5c8fe4[.]n3[.]thirdptop[.]com"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "host": "1c362a10-f2db-4f2b-ba70-04c2f6cd1ea1[.]easywbdesign[.]com"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "host": "1c362a10-f2db-4f2b-ba70-04c2f6cd1ea1[.]n4[.]thirdptop[.]com"}, {"hashes": ["60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189"], "host": "server9[.]easywbdesign[.]com"}, {"hashes": ["60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189"], "host": "c92bfb90-2c63-40b0-8d09-8d2bdf90e43a[.]easywbdesign[.]com"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "server8[.]sndvoices[.]com"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "host": "535bea36-283d-4a56-9718-ebb66765bea4[.]n6[.]thirdptop[.]com"}, {"hashes": ["3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243"], "host": "32c32efd-de6f-40a8-ba88-0d5aa2552346[.]easywbdesign[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "host": "fbae09e4-520f-4df3-b2a4-f92a6a7bf0af[.]n5[.]thirdptop[.]com"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "host": "server14[.]sndvoices[.]com"}, {"hashes": ["b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764"], "host": "1ad001e0-2cf2-4bbb-be5e-be90b8a32e3c[.]easywbdesign[.]com"}, {"hashes": ["8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b"], "host": "server7[.]sndvoices[.]com"}, {"hashes": ["8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b"], "host": "8c2feb6e-5534-4be3-8e0d-0da24725dd1a[.]easywbdesign[.]com"}, {"hashes": ["6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b"], "host": "442f061c-0488-41b1-bbf4-dc00da94f551[.]easywbdesign[.]com"}, {"hashes": ["e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "host": "2c7c10d6-e3ec-49f8-bbfe-3c98eb765540[.]easywbdesign[.]com"}], "file": [{"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%SystemRoot%\\Logs\\CBS\\CBS.log"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%SystemRoot%\\rss"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%SystemRoot%\\rss\\csrss.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\csrss"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\csrss\\dsefix.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\csrss\\patch.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%System32%\\drivers\\Winmon.sys"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%System32%\\drivers\\WinmonFS.sys"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%System32%\\drivers\\WinmonProcessMonitor.sys"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols\\ntkrnlmp.pdb"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols\\ntkrnlmp.pdb\\9E22A5947A15489895CE716436B45BE02"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols\\ntkrnlmp.pdb\\9E22A5947A15489895CE716436B45BE02\\download.error"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols\\pingme.txt"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols\\winload_prod.pdb"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols\\winload_prod.pdb\\B7B16B17E078406E806A050C8BEE2E361"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\Symbols\\winload_prod.pdb\\B7B16B17E078406E806A050C8BEE2E361\\download.error"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\dbghelp.dll"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\ntkrnlmp.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\osloader.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\symsrv.dll"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%TEMP%\\csrss\\DBG0.tmp"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%System32%\\Tasks\\ScheduledUpdate"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "path": "%System32%\\Tasks\\csrss"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "path": "%TEMP%\\csrss\\collectchromefingerprint.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "path": "%TEMP%\\csrss\\u20200626.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "path": "%TEMP%\\csrss\\ww30.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "path": "%TEMP%\\csrss\\m672.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "path": "%TEMP%\\csrss\\mg20201223-1.exe"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "path": "%TEMP%\\csrss\\ml20201223.exe"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "path": "%TEMP%\\csrss\\pcstats.exe"}], "ip": [{"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "104[.]214[.]40[.]16"}, {"hashes": ["3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "204[.]79[.]197[.]219"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "104[.]28[.]30[.]17"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "104[.]21[.]26[.]241"}, {"hashes": ["1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "172[.]67[.]168[.]157"}, {"hashes": ["1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "ip": "172[.]67[.]170[.]134"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "172[.]67[.]128[.]242"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae"], "ip": "104[.]28[.]2[.]216"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b"], "ip": "172[.]67[.]170[.]203"}, {"hashes": ["3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "104[.]18[.]47[.]206"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "ip": "104[.]21[.]1[.]88"}, {"hashes": ["60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "104[.]27[.]150[.]210"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "104[.]27[.]151[.]210"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764"], "ip": "131[.]253[.]33[.]219"}, {"hashes": ["3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "ip": "104[.]28[.]31[.]17"}, {"hashes": ["78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "ip": "204[.]79[.]197[.]200"}, {"hashes": ["3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "ip": "104[.]28[.]3[.]216"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e"], "ip": "104[.]18[.]46[.]206"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "172[.]217[.]197[.]102"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "173[.]194[.]175[.]138"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "173[.]194[.]175[.]95"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "ip": "94[.]130[.]204[.]130"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "ip": "195[.]201[.]243[.]176"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "148[.]251[.]238[.]14"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "104[.]27[.]187[.]4"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "172[.]217[.]222[.]132"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "74[.]125[.]155[.]168"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "104[.]21[.]21[.]231"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b"], "ip": "104[.]27[.]173[.]230"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "172[.]217[.]197[.]138/31"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "209[.]197[.]3[.]24"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "23[.]3[.]13[.]88"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "104[.]16[.]19[.]94"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "ip": "136[.]243[.]40[.]71"}, {"hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "ip": "104[.]18[.]58[.]185"}, {"hashes": ["81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af"], "ip": "172[.]67[.]130[.]171"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "ip": "172[.]67[.]176[.]246"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "ip": "195[.]201[.]173[.]247"}, {"hashes": ["a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "ip": "171[.]227[.]0[.]0/28"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "ip": "104[.]18[.]59[.]185"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "ip": "185[.]187[.]0[.]0/26"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "ip": "185[.]187[.]0[.]64/30"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "ip": "185[.]187[.]0[.]68/31"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "ip": "104[.]27[.]172[.]230"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f"], "ip": "104[.]218[.]0[.]0/26"}], "mutex": [{"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "name": "Global\\SetupLog"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "name": "Global\\WdsSetupLogInit"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "name": "Global\\h48yorbq6rm87zot"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "name": "Global\\ewzy5hgt3x5sof4v"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "name": "Global\\xmrigMUTEX31337"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "name": "WininetConnectionMutex"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7"], "name": "Global\\wpsSerMutex2"}, {"hashes": ["4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5"], "name": "Global\\sswxstats"}], "registry": [{"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WUAUSERV", "value_name": "DeleteFlag"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{9DEA862C-5CDD-4E70-ACC1-F32B344D4795}\\ELEMENTS\\23000003", "value_name": "Element"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\16000048", "value_name": "Element"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\25000020", "value_name": "Element"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\16000009", "value_name": "Element"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\14000006", "value_name": "Element"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMONFS", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMONFS\\INSTANCES", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMONFS\\INSTANCES\\WINMONFS", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\22000011", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\16000009", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\12000002", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\14000006", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\16000048", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\25000020", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\22000002", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\21000001", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\11000001", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\DESCRIPTION", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\BCD00000000\\OBJECTS\\{71A3C7FC-F751-4982-AEC1-E958357E6813}\\ELEMENTS\\12000004", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMON", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMON\\SECURITY", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMONFS\\SECURITY", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMONPROCESSMONITOR", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\WINMONPROCESSMONITOR\\SECURITY", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "DistributorID"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "CampaignID"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "SB"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "PatchTime"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "PGDSE"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "Firewall"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "Defender"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "FirstInstallDate"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "ServiceVersion"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "SC"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "VC"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "ServersVersion"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "OSArchitecture"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "IsAdmin"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "AV"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "CPU"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "GPU"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "Servers"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "OSCaption"}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\ROOT\\CERTIFICATES\\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4", "value_name": null}, {"hashes": ["0ab9a985f16a8fd8cfd31574180e2109ebf6f88e75fb2e16d966fca13a8f969f", "1f8b0dac5cb2e3ba0a1341333e702ba11a276e3ef5e9cb17070921dffefd5734", "3ae41434c248ba674a1bbf93a7302962b7845dcb63fd1dbbd085cecd9dea1243", "4a30172b43ba3b77ce944e245369fe1f8d1bad742a448d626f0f36100841dff5", "60d1bd8c47f122e5cfe9b3a02a09684d08bc85f8223f83de98a49b230ee8e189", "66b63477620a1a540b65322e48c8de7bbcaf9b417d80a43bc89662ac19f1f1b4", "6ad76dd2ae941604a6ae26ed2c41033efbf16a04a7fc82f682d9a66d07f76a3b", "78354a477af61648620b4b2f44f3a28477aa2f86a199ac88548f84212fb16767", "81b146b0e1bb17861f4cf6e823b96690d78032f2f69128aa50034951943bd3af", "8bf465b3670c7c1e541d848eb4f2c4ba730e309caed3c22038e1457746632f7b", "96fee0eabe5b07d1b2441698327069823c2b308e215d30b32a24263bdaea22ae", "a0f74dff52e0c5e868fe5e242a15c121dab7e0a986f1a9afab9f7fa8ff0955b7", "b0d0f56625c4ec6ccf9cf013897cba690d1b490ce1bb619dc8eca6cbcc503764", "e5b16d78857c729001b060d22708f93d2bc4664c0f9e8891e296c307ba09072e", "f316f9c9f635457b330e76e1f5dcc2f3c1b2522bfa280c1d99eede9f71894e89", "f78e42d31ef6a91b65d74fdeacd34419c8f1804a19a11996ec15c91c8ccf6351"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\A1890984", "value_name": "CDN"}]}, "reports_count": 16}, "Win.Virus.Expiro-9819253-0": {"bis": [{"bi": "pe-encrypted-section", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "memory-execute-readwrite", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "TA0004", "T1055"]}, {"bi": "modified-executable", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "created-executable-in-user-dir", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "antivirus-service-flagged-artifact", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "modified-file-in-user-dir", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "cta-static-analyzer-malicious", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "artifact-flagged-anomaly", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "hook-installed", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0009", "TA0006", "T1056"]}, {"bi": "pe-uses-dot-net", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "modified-file-in-program-dir", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "modified-file-in-system-dir", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "imports-IsDebuggerPresent", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "registry-service-autostart-disabled", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "TA0040", "TA0003", "TA0004", "T1112", "T1489"]}, {"bi": "registry-action-center-disabled", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "process-with-multiple-children", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005"]}, {"bi": "pe-tls-callback", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "T1027"]}, {"bi": "pe-imports-toolhelp", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0007", "T1057"]}, {"bi": "registry-service-type-modified", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "TA0003", "TA0004", "T1112"]}, {"bi": "excessive-logical-drive-enumeration", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0007", "TA0009", "T1120", "T1025"]}, {"bi": "malware-xpiro-mutex", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}, {"bi": "registry-disable-smartscreen", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "T1562"]}, {"bi": "registry-user-shell-folder-modified", "hashes": ["e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0005", "T1112"]}, {"bi": "audio-video-mutex-detected", "hashes": ["9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": ["TA0009", "T1123", "T1125"]}, {"bi": "pe-invalid-checksum", "hashes": ["700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04", "01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb"], "mitre_attack_tags": []}], "category": "Virus", "coverage": {"AMP": true, "CWS": true, "Cloudlock": false, "Email Security": true, "Network Security": false, "Threat Grid": true, "Umbrella": false, "WSA": false}, "description": "Expiro is a known file infector and information-stealer that hinders analysis with anti-debugging and anti-analysis tricks.", "hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "iocs": {"domain": [], "file": [{"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%CommonProgramFiles(x86)%\\microsoft shared\\Source Engine\\OSE.EXE"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%ProgramFiles(x86)%\\Microsoft Office\\Office14\\GROOVE.EXE"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%ProgramFiles(x86)%\\Mozilla Maintenance Service\\maintenanceservice.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v2.0.50727\\mscorsvw.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v4.0.30319\\mscorsvw.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorsvw.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v4.0.30319\\mscorsvw.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\alg.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\dllhost.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\ehome\\ehrecvr.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v2.0.50727\\ngen_service.log"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v2.0.50727\\ngen_service.log"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Registration\\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{33EC2C09-9668-4DE7-BCC0-EFC69D7355D7}.crmlog"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v4.0.30319\\ngen_service.log"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v4.0.30319\\ngen_service.log"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v4.0.30319\\ngenrootstorelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v4.0.30319\\ngenservicelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v4.0.30319\\ngenrootstorelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v4.0.30319\\ngenservicelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v2.0.50727\\ngen_service.lock"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v2.0.50727\\ngenservicelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v2.0.50727\\ngen_service.lock"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v2.0.50727\\ngenservicelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%LOCALAPPDATA%\\rqboqelc"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%LOCALAPPDATA%\\rqboqelc\\cmd.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%ProgramData%\\Microsoft\\eHome\\RecoveryTasks"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework\\v4.0.30319\\ngenofflinequeuelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\ngennicupdatelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\ngenservice_pri1_lock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v4.0.30319\\ngenofflinequeuelock.dat"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\LogFiles\\Scm\\6191bf2a-eda7-4434-a7d4-0fcf62dd8b1e"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\<random, matching '[a-z]{8}'>.tmp"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\microsoft.net\\framework\\v2.0.50727\\<random, matching '[a-z]{8}'>.tmp"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\microsoft.net\\framework64\\v2.0.50727\\<random, matching '[a-z]{8}'>.tmp"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\microsoft.net\\framework\\v4.0.30319\\<random, matching '[a-z]{8}'>.tmp"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\microsoft.net\\framework64\\v4.0.30319\\<random, matching '[a-z]{8}'>.tmp"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\ehome\\ehsched.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\Microsoft.NET\\Framework64\\v3.0\\Windows Communication Foundation\\infocard.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\FXSSVC.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\ieetwcollector.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\LogFiles\\Scm\\493be8b4-084c-4414-a0e3-e7edc47959b2"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\microsoft.net\\framework64\\v3.0\\windows communication foundation\\<random, matching '[a-z]{8}'>.tmp"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%PUBLIC%\\Recorded TV\\TempRec"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%PUBLIC%\\Recorded TV\\TempRec\\TempSBE"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\msdtc.exe"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%ProgramData%\\Microsoft\\eHome\\SharedSBE"}, {"hashes": ["23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\msiexec.exe"}, {"hashes": ["23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%SystemRoot%\\SysWOW64\\perfhost.exe"}, {"hashes": ["23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "path": "%System32%\\Locator.exe"}, {"hashes": ["8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f"], "path": "%SystemRoot%\\ehome\\gcajkhbp.tmp"}], "ip": [{"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "ip": "239[.]255[.]255[.]250"}], "mutex": [{"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "name": "Global\\mlbjlegc"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "name": "Global\\Media Center Tuner Request"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "name": "eed3bd3a-a1ad-4e99-987b-d7cb3fcfa7f0 - S-1-5-18"}], "registry": [{"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\COMSYSAPP", "value_name": "Type"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\COMSYSAPP", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\MOZILLAMAINTENANCE", "value_name": "Type"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\MOZILLAMAINTENANCE", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\OSE", "value_name": "Type"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\OSE", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\SECURITY CENTER\\SVC\\S-1-5-21-2580483871-590521980-3826313501-500", "value_name": null}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SYSTEM", "value_name": "EnableSmartScreen"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\SECURITY CENTER\\SVC\\S-1-5-21-2580483871-590521980-3826313501-500", "value_name": "EnableNotifications"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\CLR_OPTIMIZATION_V2.0.50727_32", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\ALG", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\EHRECVR", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\MICROSOFT SHAREPOINT WORKSPACE AUDIT SERVICE", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\SHELL FOLDERS", "value_name": "Startup"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKCU>\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\USER SHELL FOLDERS", "value_name": "Startup"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\CLR_OPTIMIZATION_V2.0.50727_64", "value_name": "Start"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\STATE", "value_name": "AccumulatedWaitIdleTime"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\LISTENEDSTATE", "value_name": "RootstoreDirty"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\ACCESSIBILITY, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\CUSTOMMARSHALERS, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\MICROSOFT.VISUALBASIC, VERSION=10.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\MSCORLIB, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\PRESENTATIONCORE, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=31BF3856AD364E35\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\PRESENTATIONFRAMEWORK, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=31BF3856AD364E35\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\PRESENTATIONFRAMEWORK.AERO, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=31BF3856AD364E35\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.CONFIGURATION, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.CONFIGURATION.INSTALL, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.CORE, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.DATA, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.DIRECTORYSERVICES, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.DRAWING, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.MANAGEMENT, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.RUNTIME.REMOTING, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.SERVICEPROCESS, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.TRANSACTIONS, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.WEB.SERVICES, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.WINDOWS.FORMS, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.XAML, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\SYSTEM.XML, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B77A5C561934E089\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\WINDOWSBASE, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=31BF3856AD364E35\\1", "value_name": "RuntimeVersion"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\ROOTS\\ACCESSIBILITY, VERSION=4.0.0.0, CULTURE=NEUTRAL, PUBLICKEYTOKEN=B03F5F7F11D50A3A\\1", "value_name": "ImageList"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\STATE", "value_name": "AccumulatedWaitIdleTime"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\.NETFRAMEWORK\\V2.0.50727\\NGENSERVICE\\LISTENEDSTATE", "value_name": "RootstoreDirty"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\ALG", "value_name": "ObjectName"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\ALG", "value_name": "Type"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\MICROSOFT SHAREPOINT WORKSPACE AUDIT SERVICE", "value_name": "ObjectName"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\MICROSOFT SHAREPOINT WORKSPACE AUDIT SERVICE", "value_name": "Type"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\EHRECVR", "value_name": "ObjectName"}, {"hashes": ["01f092156a79e974530a99d5698711279acf9f73e322c6ea9da1544eed06e550", "06a8da750a8deba5cb4df7bc69173dcf9e9e05f3872c6ee6975c5b4fd2f3db50", "0db81bfc08d9cf6a02fa97d7b7384774840ce979c62be17c2f5e0089897164e1", "23b16b3fe5a962c2282c097f02f0061fe38b60827fde49d2fe78341712b797a6", "36f702a33e824babd5e1838e9b2a589d75778cb66368b3ac2055da3519661b39", "52b305111828c5637dbc74738aa89d55abcbe4ac70a14c70f38a7f1373f3fe55", "6014b7ccc366123c5b73f6d615d1abd2e8f01f50a7aa677301cc71b03f634d31", "672334067e99cf9861c7e78631f8a2ab5c74b5172c82120d6bc47a305e7f2bfb", "6b94b49ef54089c0bbf8eb4610332521e94fa7f6ae84449df3f3f86d4243d07b", "700f2beedab087e9c7876adbb5c37a01dfcf71c47dadeed0e3adea63e6ad6a3c", "8816c73995b821633bd60feff641fa15f58799e5b299f477bcaf8785e5a56e1f", "9e6defed8098dfe5654fc4b9c10bd852a76b560ae1d3044a6d06d8c09e7408d0", "9e782c6f64a63b1c0e8751fe6185234c6deacca0a8bebbc1b0996f040c645485", "e123b1fa253faced17dae411ccb97d88ebb9812b9863fb099ad900d28b265f5a", "e8c70cf85c5824504ee91d028a3827b019b9a52c2d533308bc1e25b426ab901b", "fe0a57e614cae59e3cbe3057073f96b2342f7abbbad6ac003d66a7efd7490f04"], "key": "<HKLM>\\SYSTEM\\CONTROLSET001\\SERVICES\\EHRECVR", "value_name": "Type"}]}, "reports_count": 16}, "exprev": [{"count": 4613, "description": "DealPly is adware, which claims to improve your online shopping experience. It is often bundled into other legitimate installers and is difficult to uninstall. It creates pop-up advertisements and injects advertisements on webpages. Adware has also been known to download and install malware.", "name": "Dealply adware detected"}, {"count": 3453, "description": "Process hollowing is a technique used by some programs to avoid static analysis. In typical usage, a process is started and its obfuscated or encrypted contents are unpacked into memory. The parent then manually sets up the first stages of launching a child process, but before launching it, the memory is cleared and filled in with the memory from the parent instead.", "name": "Process hollowing detected"}, {"count": 1214, "description": "A process associated with Microsoft Office, such as EXCEL.exe or WINWORD.exe, has started a Windows utility such as powershell.exe or cmd.exe. This is typical behavior of malicious documents executing additional scripts. This behavior is extremely suspicious and is associated with many malware different malware campaigns and families.", "name": "A Microsoft Office process has started a windows utility."}, {"count": 860, "description": "A process was injected into, most likely by an existing Kovter infection. Kovter is a click fraud Trojan that can also act as an information stealer. Kovter is also file-less malware meaning the malicious DLL is stored inside Windows registry and injected directly into memory using PowerShell. It can detect and report the usage of monitoring software such as wireshark and sandboxes to its C2. It spreads through malicious advertising and spam campaigns.", "name": "Kovter injection detected"}, {"count": 713, "description": "An attempt to bypass application whitelisting via the \"Squiblydoo\" technique has been detected. This typically involves using regsvr32.exe to execute script content hosted on an attacker controlled server.", "name": "Squiblydoo application whitelist bypass attempt detected."}, {"count": 390, "description": "Install core is an installer which bundles legitimate applications with offers for additional third-party applications that may be unwanted. The unwanted applications are often adware that display advertising in the form of popups or by injecting into browsers and adding or altering advertisements on webpages. Adware is known to sometimes download and install malware.", "name": "Installcore adware detected"}, {"count": 388, "description": "A PowerShell command with a very long command line argument that may indicate an obfuscated script has been detected. PowerShell is an extensible Windows scripting language present on all versions of Windows. Malware authors use PowerShell in an attempt to evade security software or other monitoring that is not tuned to detect PowerShell based threats.", "name": "Excessively long PowerShell command detected"}, {"count": 345, "description": "Crystalbit-Apple DLL double hijack was detected. During this attack, the adversary abuses two legitimate vendor applications, such as CrystalBit and Apple, as part of a dll double hijack attack chain that starts with a fraudulent software bundle and eventually leads to a persistent miner and in some cases spyware deployment.", "name": "Crystalbit-Apple DLL double hijack detected"}, {"count": 115, "description": "Gamarue is a family of malware that can download files and steal information from an infected system. Worm variants of the Gamarue family may spread by infecting USB drives or portable hard disks that have been plugged into a compromised system.", "name": "Gamarue malware detected"}, {"count": 112, "description": "An attempt to exploit CVE-2019-0708 has been detected. The vulnerability, dubbed BlueKeep, is a heap memory corruption which can be triggered by sending a specially crafted Remote Desktop Protocol (RDP) request. Since this vulnerability can be triggered without authentication and allows remote code execution, it can be used by worms to spread automatically without human interaction.", "name": "CVE-2019-0708 detected"}, {"count": 109, "description": "An exploit payload intended to connect back to an attacker controlled host using http has been detected.", "name": "Reverse http payload detected"}, {"count": 63, "description": "Maze ransomware has been detected injecting into rundll32.exe or regsvr32.exe. Maze can encrypt files on the victim and demand a ransom. It can also exfiltrate data back to the attacker prior to encryption.", "name": "Maze ransomware detected"}, {"count": 45, "description": "Bluestacks adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Bluestacks adware detected"}, {"count": 37, "description": "The certutil.exe utility has been detected downloading and executing a file. Upon execution, the downloaded file behaved suspiciously. The normal usage of certutil.exe involves retrieving certificate information. Attackers can use this utility to download additional malicious payloads.", "name": "Certutil.exe is downloading a file"}, {"count": 27, "description": "Houdini/HWORM detected. This worm uses an obfuscated VBScript to drop additional malware such as njRAT.", "name": "Houdini/HWORM detected"}, {"count": 16, "description": "Command line options indicating usage of XMRig Miner have been detected. Malware sometimes uses compromised hosts to mine for cryptocurrency on behalf of the attacker.", "name": "XMRig Miner Detected"}, {"count": 10, "description": "An unknown adware family was detected. Adware displays unwanted advertising in the form of popups or by injecting into browsers and altering advertisements on webpages. Adware has also been known to download and install malware.", "name": "Unknown adware family detected"}, {"count": 9, "description": "Corebot is a Trojan with many capabilities found in other prominent families. It features a plugin system to enable it to load a variety of features from the C&C server at any time. Known plugins include RAT capabilities such as taking desktop screenshots, as well as being able to intercept and modify browser communications and steal data, especially data related to banking.", "name": "Corebot malware detected"}, {"count": 6, "description": "Smoke Loader has been detected. Smokeloader is used mainly to execute other malicious software, like ransomware or cryptocurrency miners. Its initial infection vector is usually an email with a malicious Microsoft Word document or delivered through an exploit kit. Smokeloader uses various plugins designed to steal data from its victims, particularly credentials stored on the system or transfered over HTTP, HTTPS, FTP, SMTP, POP3 or IMAP.", "name": "Smoke Loader detected"}], "info": {"origin": "Cisco Talos Intelligence Group", "publication_date": "2021-01-15T16:11:50+00:00", "version": "2.1", "warning": "As a reminder, the information provided for the following threatsin this post is non-exhaustive and current as of the date ofpublication. Additionally, please keep in mind that IOC searchingis only one part of threat hunting. Spotting a single IOC does notnecessarily indicate maliciousness. Detection and coverage for thefollowing threats is subject to updates, pending additional threator vulnerability analysis. For the most current information, pleaserefer to your Firepower Management Center, Snort.org, or ClamAV.net."}, "signatures": ["Win.Packed.Glupteba-9819426-0", "Win.Dropper.Bunitu-9819420-0", "Win.Dropper.BazarLoader-9819187-1", "Win.Packed.Dridex-9819209-1", "Win.Virus.Expiro-9819253-0", "Win.Malware.FickerStealer-9819303-1", "Win.Malware.Tofsee-9819431-1", "Win.Malware.Redline-9819608-1", "Win.Malware.Zegost-9819547-0"]}